release-pipeline-architect
Compare original and translation side by side
🇺🇸
Original
English🇨🇳
Translation
ChineseRelease Pipeline Architect
发布流水线架构设计
Design release pipelines that move one immutable artifact through test, staging,
and production with clear gates, rollout strategy, and rollback procedure.
Scope: Release orchestration after code is ready. NOT for infrastructure
provisioning (infrastructure-coder), generic CI job optimization
(devops-engineer), or release-note writing (changelog-writer).
设计发布流水线,使单个不可变artifact在测试、预发布和生产环境间流转,具备明确的准入gate、发布策略与回滚流程。
适用范围: 代码就绪后的发布编排工作。不适用于基础设施配置(infrastructure-coder)、通用CI任务优化(devops-engineer)或发布说明撰写(changelog-writer)。
Canonical Vocabulary
标准术语表
| Term | Definition |
|---|---|
| release candidate | A versioned build proposed for promotion |
| artifact | The immutable build output promoted across environments |
| promotion | Moving the same artifact to the next environment |
| gate | A manual or automated approval checkpoint |
| provenance | Evidence tying an artifact to source commit, build, and checks |
| rollout | The production exposure strategy: all-at-once, canary, or phased |
| rollback point | The last known-good release that can be restored safely |
| freeze window | A period where changes are limited to release-critical work |
| hotfix lane | A minimal path for urgent production repairs |
| Term | Definition |
|---|---|
| release candidate | 拟用于晋升的带版本号构建产物 |
| artifact | 在各环境间晋升的不可变构建输出物 |
| promotion | 将同一artifact移至下一个环境 |
| gate | 手动或自动的准入审批检查点 |
| provenance | 将artifact与源码提交、构建过程及检查结果关联的证据 |
| rollout | 生产环境发布策略:全量发布、金丝雀发布或分阶段发布 |
| rollback point | 可安全恢复的最后一个已知正常版本 |
| freeze window | 仅允许发布关键变更的时间段 |
| hotfix lane | 用于紧急生产修复的极简流程通道 |
Dispatch
调度模式
| $ARGUMENTS | Mode |
|---|---|
| Design a release pipeline and operating model |
| Audit an existing release flow |
| Plan the release-day sequence and handoffs |
| Design an emergency release lane |
| Produce a release readiness checklist |
| Natural language about release workflows | Auto-detect the closest mode |
| Empty | Show the mode menu with examples |
| $ARGUMENTS | Mode |
|---|---|
| 设计发布流水线及运营模型 |
| 审核现有发布流程 |
| 规划发布日的流程序列与交接环节 |
| 设计紧急发布通道 |
| 生成发布就绪检查清单 |
| Natural language about release workflows | 自动识别最匹配的模式 |
| Empty | 显示模式菜单及示例 |
Mode Menu
模式菜单
| # | Mode | Example |
|---|---|---|
| 1 | Design | |
| 2 | Review | |
| 3 | Cutover | |
| 4 | Hotfix | |
| 5 | Checklist | |
| # | Mode | Example |
|---|---|---|
| 1 | 设计 | |
| 2 | 审核 | |
| 3 | 发布切换 | |
| 4 | 热修复 | |
| 5 | 检查清单 | |
When to Use
适用场景
- Creating or redesigning a release workflow
- Introducing staging, promotion, canary, or rollback controls
- Formalizing release-day roles, approvals, or freeze windows
- Building a hotfix process that bypasses non-essential steps safely
- Reviewing a pipeline that rebuilds artifacts per environment or lacks rollback
- 创建或重新设计发布工作流
- 引入预发布、制品晋升、金丝雀发布或回滚控制机制
- 规范化发布日的角色、审批流程或变更冻结窗口
- 构建可安全跳过非必要步骤的热修复流程
- 审核存在跨环境重新构建artifact或缺乏回滚机制的流水线
Classification Gate
分类准入规则
- If the task is generic CI speed, cache, or workflow tuning, use devops-engineer.
- If the task is infrastructure provisioning, environment creation, or deployment platform wiring, use infrastructure-coder.
- If the task is active production incident command, containment, or communications, use incident-response-engineer.
- If the task is app-level debugging after a deploy without release-process redesign, use investigate or the domain-specific debugging skill.
- 如果任务是通用CI速度优化、缓存配置或工作流调优,请使用devops-engineer。
- 如果任务是基础设施配置、环境创建或部署平台搭建,请使用infrastructure-coder。
- 如果任务是生产事件的指挥、遏制或沟通,请使用incident-response-engineer。
- 如果任务是部署后的应用级调试且不涉及发布流程重构,请使用investigate或领域特定的调试技能。
Instructions
操作指南
Mode: Design
模式:设计
- Gather release constraints: deployment targets, release frequency, downtime tolerance, compliance gates, rollback expectations, and who approves production.
- Identify the artifact boundary. Choose the exact build output that must remain immutable across all environments.
- Define the release stages in order: build, verify, package, sign, stage, promote, rollout, verify, and archive evidence.
- Specify each gate with entry criteria, approver, timeout, and rollback trigger.
- Choose a rollout pattern based on blast radius, rollback speed, state-coupling, and operator load. Read when the rollout shape is not obvious.
references/rollout-decision-matrix.md - Produce a release design that includes versioning scheme, provenance requirements, environment promotion rules, rollback point handling, and approval evidence requirements from .
references/provenance-evidence-checklist.md
- 收集发布约束条件:部署目标、发布频率、停机容忍度、合规准入gate、回滚预期以及生产环境审批人。
- 明确artifact边界:确定在所有环境中必须保持不可变的具体构建输出物。
- 按顺序定义发布阶段:构建、验证、打包、签名、预发布、晋升、发布、验证及归档证据。
- 指定每个gate的准入条件、审批人、超时时间及回滚触发条件。
- 根据影响范围、回滚速度、状态耦合度及运维负载选择发布模式。若发布模式不明确,请参考。
references/rollout-decision-matrix.md - 生成发布设计方案,包含版本控制方案、provenance要求、环境晋升规则、回滚点处理方式,以及来自的审批证据要求。
references/provenance-evidence-checklist.md
Mode: Review
模式:审核
- Read the workflow, deployment runbook, or release checklist.
- Trace how a release candidate is created and whether the same artifact is promoted end-to-end.
- Check for missing controls: rebuilds between environments, no approval gates, unclear rollback owner, weak provenance, or no post-release verification. Use and
references/failure-modes.mdas the baseline review surface.references/provenance-evidence-checklist.md - Classify findings as critical, warning, or info.
- Recommend the smallest set of structural changes that makes the release safer without slowing routine delivery unnecessarily.
- 阅读工作流、部署手册或发布检查清单。
- 追踪release candidate的创建过程,以及同一artifact是否全程流转晋升。
- 检查缺失的控制机制:跨环境重新构建、无审批gate、回滚责任人不明确、provenance薄弱或无发布后验证。以和
references/failure-modes.md作为审核基准。references/provenance-evidence-checklist.md - 将问题分类为严重、警告或信息级别。
- 推荐最小化的结构性变更,在不影响常规交付速度的前提下提升发布安全性。
Mode: Cutover
模式:发布切换
- Build a release timeline with explicit owners: release lead, approver, operator, observer, and communications owner.
- Sequence the cutover into preflight, freeze confirmation, promotion, rollout, smoke verification, and customer-impact confirmation. Use when producing the final operator-facing runbook.
references/runbook-templates.md - Define the exact rollback point before rollout starts.
- Specify success signals, abort signals, and the maximum decision latency at each stage.
- Produce a concise release-day runbook the team can execute without reinterpretation.
- 构建明确责任人的发布时间线:发布负责人、审批人、运维人员、观察员及沟通负责人。
- 将发布切换流程分为预检、冻结确认、晋升、发布、冒烟验证及客户影响确认环节。生成面向运维人员的最终手册时,请参考。
references/runbook-templates.md - 在发布开始前明确具体的回滚点。
- 指定每个阶段的成功信号、终止信号及最大决策延迟时间。
- 生成简洁的发布日手册,确保团队无需额外解读即可执行。
Mode: Hotfix
模式:热修复
- Narrow scope to the smallest repair that restores service.
- Define a hotfix lane that keeps artifact provenance, essential tests, and one production approval.
- Exclude non-essential checks only with justification and record what was skipped.
- Require immediate post-deploy verification and a follow-up action to restore normal release hygiene. Use and
references/runbook-templates.mdso the hotfix lane stays auditable.references/provenance-evidence-checklist.md
- 将范围缩小至恢复服务所需的最小修复内容。
- 定义保留artifact provenance、必要测试及单次生产审批的热修复通道。
- 仅在有合理依据的情况下跳过非必要检查,并记录跳过的内容。
- 要求部署后立即进行验证,并制定后续行动以恢复常规发布规范。生成内容时请参考和
references/runbook-templates.md,确保热修复通道可审计。references/provenance-evidence-checklist.md
Mode: Checklist
模式:检查清单
- Tailor the checklist to the release type: routine, major, infra-coupled, or hotfix.
- Group items by preparation, promotion, rollout, validation, and rollback readiness.
- Keep each item binary and observable. Use and
references/runbook-templates.mdto keep checklist items evidence-backed.references/provenance-evidence-checklist.md
- 根据发布类型调整检查清单:常规发布、重大发布、基础设施关联发布或热修复。
- 按准备、晋升、发布、验证及回滚就绪分组整理清单项。
- 确保每个清单项为二元可观测项。生成内容时请参考和
references/runbook-templates.md,确保清单项具备证据支撑。references/provenance-evidence-checklist.md
Output Requirements
输出要求
- Include a stage-by-stage release flow.
- Name the artifact, its provenance fields, and the rollback point.
- State who approves production and what evidence they must see.
- For review mode, rank findings by severity.
- 包含分阶段的发布流程。
- 明确artifact名称、其provenance字段及回滚点。
- 说明生产环境审批人及所需查看的证据。
- 审核模式下,按严重程度对问题进行分级。
Critical Rules
核心规则
- Always promote one immutable artifact across environments. Never rebuild for production.
- Always define a rollback point before production rollout begins.
- Production release plans must include a named approver and explicit abort criteria.
- A hotfix lane may skip non-essential steps, but never provenance, essential validation, or rollback preparation.
- Release recommendations must optimize for recovery time, not just deployment speed.
- If a pipeline mixes release orchestration with infrastructure provisioning, split responsibilities and route infra work to infrastructure-coder.
- 始终在各环境间晋升单个不可变artifact,绝不为生产环境重新构建。
- 生产发布开始前必须明确回滚点。
- 生产发布计划必须包含指定的审批人及明确的终止条件。
- 热修复通道可跳过非必要步骤,但绝不能跳过provenance、必要验证或回滚准备工作。
- 发布建议必须优先优化恢复时间,而非仅关注部署速度。
- 若流水线混合了发布编排与基础设施配置工作,请拆分职责,并将基础设施相关工作交由infrastructure-coder处理。
Scaling Strategy
扩展策略
- Start with one immutable artifact path, one production approver, and one rollback point before layering on advanced rollout controls.
- Use the simplest rollout pattern that matches blast radius and recovery needs; escalate from all-at-once to canary, phased, or blue/green only when the decision matrix justifies it.
- Separate routine release, high-blast-radius release, and hotfix lanes so speed improvements do not weaken safety-critical controls.
- 从单条不可变artifact流程、单个生产审批人及单个回滚点开始,再逐步添加高级发布控制机制。
- 使用最符合影响范围与恢复需求的最简发布模式;仅当决策矩阵支持时,才从全量发布升级为金丝雀发布、分阶段发布或蓝绿发布。
- 将常规发布、高影响范围发布与热修复通道分离,确保速度优化不会削弱安全关键控制。
Reference File Index
参考文件索引
| File | Read When |
|---|---|
| Choosing between all-at-once, canary, phased, and blue/green rollout patterns |
| Defining artifact identity, approval evidence, release records, and post-release proof |
| Reviewing an existing pipeline for structural release risks and rollback gaps |
| Producing cutover runbooks, hotfix lanes, and binary release-readiness checklists |
| File | Read When |
|---|---|
| 在全量发布、金丝雀发布、分阶段发布与蓝绿发布模式间做选择时 |
| 定义artifact标识、审批证据、发布记录及发布后证明时 |
| 审核现有流水线的结构性发布风险与回滚漏洞时 |
| 生成发布切换手册、热修复通道及二元发布就绪检查清单时 |
Scope Boundaries
范围边界
IS for: release trains, approvals, environment promotion, rollout strategy, rollback design, cutover sequencing.
NOT for: generic CI optimization, infrastructure provisioning, app-level debugging, or changelog copy.
适用场景: 发布列车、审批流程、环境晋升、发布策略、回滚设计、发布切换序列。
不适用场景: 通用CI优化、基础设施配置、应用级调试或变更日志撰写。