DORA dashboard + canary timeline.
Pick a release. Watch the canary tick up. See every flag toggle. Every DORA delta is a receipt.
Argo Rollouts steps: 5 → 25 → 50 → 100% over 12 minutes.
The Rollout CRD declares the canary recipe; the controller drives weight via the service-mesh Splitter. Each step pauses, runs an Analysis template against Prometheus, and only advances on `Successful`. A failed analysis fires the abort path, draining canary pods in under 90 seconds.
Anatomy — operational specs
jouledb-fast-path · bucket-hashed targeting.
Per OpenFeature spec, the SDK queries the flag store with evaluation context (user_id, region, tenant). Targeting rule hashes user_id into 100 buckets and admits buckets 0–4 for the 5% canary. Every eval emits a CloudEvents 1.0 event that DORA, Insights, and ComplianceOS can replay.
Anatomy — operational specs
Lead time · Change failure rate · MTTR · Deploy frequency.
DORA's four metrics computed from the CD event stream — not from a spreadsheet. Lead time = time from commit-merge to prod-ready; CFR = (rolled-back releases / total releases); MTTR = mean time from incident-open to incident-resolved; deploy frequency = releases per day. Every value is a receipt query.
Anatomy — operational specs
Pre-armed reverse step. Image + migration + flag-off.
Before any canary hits 100%, the controller signs a rollback envelope: previous image digest, the down-migration script (or `none`) for any schema change, and the flag-disable command. On SLO breach the envelope is replayed in one shot — round-trip under 14 minutes, RTO under 90 seconds for the pod swap.
Anatomy — operational specs
in-toto Statement linking source → build → image.
The release artifact carries an in-toto v1.0 Statement with SLSA Provenance v1.0 predicate. Materials include the git commit, the builder ID, and 47 resolved dependency pins; products are the OCI image digest. Pushed to Rekor; verifiable by any auditor without a server call beyond Rekor itself.
Anatomy — operational specs
DeliveryOS, in one line
ship, made inspectable.
Click anything. The same primitives that compose the rest of the Transaction Science family — receipts, joules, signed transport — show up here too. The family is one system.