Staged rollouts for checkout services
Three services, shared deploy pipeline anxiety. We defined canary steps, automatic halt conditions, and a single rollback owner per service.
Outcome: change-fail discussions moved from blame to metrics within one quarter.