Single-host release workflow

Close admission, verify backups, and recover safely after an interrupted cutover.

Single-host release workflow Close admission, verify backups, and recover safely after an interrupted cutover. 01 / Release wrapper 02 / Service state EX / Exception and recovery Verify and drain Guarded cutover Serve candidate Verify candidate · manifest, runtime, authority · Release wrapper › Verify and drain Verify candidate manifest, runtime, authority Stop writes; seal backup · source release and digest · Release wrapper › Guarded cutover Stop writes; seal backup source release and digest Publish and activate · Worker, controls, current link · Release wrapper › Guarded cutover Publish and activate Worker, controls, current link Close edge and drain · bounded Workflow drain · Service state › Verify and drain Close edge and drain bounded Workflow drain Start, verify, back up · then clear cutover guard · Service state › Guarded cutover Start, verify, back up then clear cutover guard Open edge; check health · then enable timers · Service state › Serve candidate Open edge; check health then enable timers Reopen source · drain refused before cutover · Exception and recovery › Guarded cutover Reopen source drain refused before cutover Keep sealed; inspect backup · restore needs a verified receipt · Exception and recovery › Guarded cutover Keep sealed; inspect backup restore needs a verified receipt Repair accepted candidate · edge, health, or timer failure · Exception and recovery › Serve candidate Repair accepted candidate edge, health, or timer failure candidate drained not drained valid verification fails guard cleared service fails sealed activation fails sealing fails