Release page: checkout v2 canary

candidate traffic

checks passing

p95 latency

last observation

Paused at 25%

Automatic promotion stopped when the finance-parity check failed. The candidate remains live for canary traffic while Ledger traces a partial-refund fixture mismatch; the exact failing producer is not yet established.

Hold until 14:32. Escalate to Finance at 14:30; roll back sooner if a customer guardrail fails.

Roll back now, or hold for Ledger's trace?

Roll back to checkout-v1 Returns all traffic from checkout-v2 to the stable release without repairing the missing finance row.

Hold at 25% until 14:32 Keeps canary traffic on checkout-v2 while Ledger traces the partial-refund fixture.

Candidate traffic since deploy

minutes since deploy, checkout-v2
0, 0
1, 5
2, 10
3, 25
4, 25
5, 25
6, 25

Run log

Example snapshot ending at 14:24:44. New events append without moving a user who has scrolled back.

Release steps

Build and verify the candidate Image signed and provenance recorded.

Deploy the 25% canary Candidate serving production checkout traffic.

Pass release checks Finance export has 1,998 of 1,999 expected rows.

Expand to 100%

Observe and complete

Checks

Four checks pass. One blocks promotion.

Check

Observed / required

Error rate Pass

0.11% / below 0.50%

p95 latency Pass

184 ms / below 300 ms

Order parity Pass

2,000 / 2,000

Finance export Fail

1,998 / 1,999 rows

Rollback target Pass

3 batches / zero delta

Release

Environment

Production

Candidate

checkout-v2

Stable

checkout-v1

Observed

14:24:44

Release notes · 3 changes

Keep partial-refund state through checkout retries.
Write refund adjustments to the finance export.
Add parity checks before production promotion.

Release owners · 5

deployer Holding promotion at 25% while finance parity is red.

ledger Reconciling co_18427 against the candidate export.

finance Waiting for the missing export row before signing off.

observer Ready to watch the release after promotion.

builder Signed the candidate and recorded its provenance.

Rollback procedure · 3 steps

Route new checkout sessions to checkout-v1.
Drain the candidate after active sessions finish.
Verify order counts and finance-export isolation.

Code changes · 2 files, +18 −4