Platform

Build, sign, stage, watch

Four stages, each of which can stop the next one.

Rollout guards

Any guard tripping halts promotion and alerts. All thresholds are yours to set.

Guard	Default	Window	Action
Update failure rate	> 0.5%	rolling 1 h	halt + alert
Boot failure / rollback	> 0.1%	rolling 1 h	halt + alert
Check-in loss	> 2% vs baseline	6 h	halt + alert
Crash loop reports	> 0.2%	rolling 2 h	halt + alert
Battery drain anomaly	> 15% vs baseline	24 h	alert
Manual hold	—	—	halt

Defining a campaign

campaign.json

{
  "fleet": "sensor-v3",
  "target": "2026.8.1",
  "stages": [
    {"percent": 1,   "soak": "6h"},
    {"percent": 5,   "soak": "12h"},
    {"percent": 25,  "soak": "24h"},
    {"percent": 100, "soak": "0"}
  ],
  "guards": {"failure_rate": 0.005,
             "rollback_rate": 0.001,
             "checkin_loss": 0.02},
  "window": {"local_hours": "01:00-05:00",
             "require_mains_power": true},
  "deadline": "2026-08-11T00:00Z"
}