# Self-Healing / Recovery / Deployment Safety

> Every term in this category is listed as one record, with its kind, its definition and its aliases, the principles whose relations name it, the principle or…

Page: Ontology · Lexicon
Canonical: https://banes-lab.com/ontology/lexicon#lexicon-category-self-healing-recovery-deployment-safety

Listed in [Ontology · Lexicon](https://banes-lab.com/api/pages/ontology/lexicon.md), after [Security Privacy Compliance](https://banes-lab.com/ontology/lexicon/lexicon-category-security-privacy-compliance.md) and before [SOLID / Object-Oriented Design](https://banes-lab.com/ontology/lexicon/lexicon-category-solid-object-oriented-design.md).

Every term in this category is listed as one record, with its kind, its definition and its aliases, the principles whose relations name it, the principle or contract that carries the same name where one exists, and the layer its category belongs to. A tag category also gives each term an example, which is the file the tag places or the rename from a refused word onto a covering tag.

### Blind Routing

- Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
Routing traffic to instances without checking their health, so requests hit dead or degraded nodes.

Referenced by
[Health Checks](https://banes-lab.com/records/architecture/health-checks.md)

How it is checked

Checked by
[Health Checks](https://banes-lab.com/records/architecture/health-checks.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Connection Cleanup

- Kind: [capability](https://banes-lab.com/records/kind/capability.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The ability to close open connections cleanly when a process shuts down.

Referenced by
[Graceful Shutdown](https://banes-lab.com/records/architecture/graceful-shutdown.md)

How it is checked

Checked by
[Graceful Shutdown](https://banes-lab.com/records/architecture/graceful-shutdown.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Consistency Lag

- Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The degree to which replicas trail the primary, so reads served from them may return stale data.

Referenced by
[Replication](https://banes-lab.com/records/architecture/replication.md)

How it is checked

Checked by
the tension resolution with replication

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Consistency Policy

- Kind: [constraint](https://banes-lab.com/records/kind/constraint.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The requirement that a defined policy specify how and when replicas converge to a consistent state.

Referenced by
[Replication](https://banes-lab.com/records/architecture/replication.md)

How it is checked

Checked by
[Replication](https://banes-lab.com/records/architecture/replication.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Continuity During Failure

- Kind: [capability](https://banes-lab.com/records/kind/capability.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The ability to keep serving requests by switching to a standby when the primary fails.

Referenced by
[Failover](https://banes-lab.com/records/architecture/failover.md)

How it is checked

Checked by
[Failover](https://banes-lab.com/records/architecture/failover.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Controlled Exposure

- Kind: [capability](https://banes-lab.com/records/kind/capability.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The ability to expose a new version to a small, controlled fraction of traffic first.

Referenced by
[Canary Deployment](https://banes-lab.com/records/architecture/canary-deployment.md)

How it is checked

Checked by
[Canary Deployment](https://banes-lab.com/records/architecture/canary-deployment.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Cost/Cold Start

- Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The degree to which scaling capacity up and down incurs added cost and cold-start latency.

Referenced by
[Auto-Scaling](https://banes-lab.com/records/architecture/auto-scaling.md)

How it is checked

Checked by
the tension resolution with auto-scaling

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Data Migration Compatibility

- Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The degree to which reverting code is constrained by forward data migrations that cannot easily be undone.

Referenced by
[Rollback](https://banes-lab.com/records/architecture/rollback.md)

How it is checked

Checked by
the tension resolution with rollback

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Disk-Failure Survival

- Kind: [capability](https://banes-lab.com/records/kind/capability.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The ability to keep serving data after one or more disks fail, by reconstructing from redundancy.

Referenced by
[RAID Redundancy](https://banes-lab.com/records/architecture/raid-redundancy.md)

Distinct from
[Parity-Based Recovery](https://banes-lab.com/records/lexicon/parity-based-recovery.md): Disk-failure survival is continuing to serve data after a disk is lost, while parity-based recovery is one way the lost data is rebuilt.

How it is checked

Checked by
[RAID Redundancy](https://banes-lab.com/records/architecture/raid-redundancy.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Empirical Resilience Verification

- Kind: [capability](https://banes-lab.com/records/kind/capability.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The ability to verify a system's resilience empirically by injecting faults and observing recovery.

Referenced by
[Chaos Engineering](https://banes-lab.com/records/architecture/chaos-engineering.md)

How it is checked

Checked by
[Chaos Engineering](https://banes-lab.com/records/architecture/chaos-engineering.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Fast Failure Recovery

- Kind: [capability](https://banes-lab.com/records/kind/capability.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The ability to recover quickly from a bad release by reverting to the last good version.

Referenced by
[Rollback](https://banes-lab.com/records/architecture/rollback.md)

How it is checked

Checked by
[Rollback](https://banes-lab.com/records/architecture/rollback.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Fixed Capacity

- Kind: [approach](https://banes-lab.com/records/kind/approach.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
Provisioning a fixed, preset amount of capacity, rather than adapting it to demand.

Referenced by
[Auto-Scaling](https://banes-lab.com/records/architecture/auto-scaling.md)

How it is checked

Checked by
the tension resolution with auto-scaling

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Hard Process Kill

- Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
Terminating a process abruptly without draining work, dropping in-flight requests and risking corrupt state.

Referenced by
[Graceful Shutdown](https://banes-lab.com/records/architecture/graceful-shutdown.md)

How it is checked

Checked by
[Graceful Shutdown](https://banes-lab.com/records/architecture/graceful-shutdown.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Health Detection

- Kind: [capability](https://banes-lab.com/records/kind/capability.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The ability to detect that a component has failed so a switchover can be triggered.

Referenced by
[Failover](https://banes-lab.com/records/architecture/failover.md)

How it is checked

Checked by
[Failover](https://banes-lab.com/records/architecture/failover.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Health Signal

- Kind: [artifact](https://banes-lab.com/records/kind/artifact.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
A machine-readable signal that reports whether a component is currently healthy, or that a fault or anomaly in it has been detected.

Aliases
Detection Signal

Referenced by
[Auto-Remediation](https://banes-lab.com/records/architecture/auto-remediation.md)

How it is checked

Checked by
[Auto-Remediation](https://banes-lab.com/records/architecture/auto-remediation.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Horizontal Scalability

- Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The degree to which a system can grow by adding more interchangeable instances rather than enlarging one.

Referenced by
[Auto-Scaling](https://banes-lab.com/records/architecture/auto-scaling.md)

How it is checked

Checked by
[Auto-Scaling](https://banes-lab.com/records/architecture/auto-scaling.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### In-Flight Work Drain

- Kind: [capability](https://banes-lab.com/records/kind/capability.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The ability to finish or safely hand off in-progress work before a process exits.

Referenced by
[Graceful Shutdown](https://banes-lab.com/records/architecture/graceful-shutdown.md)

Distinct from
[Connection Cleanup](https://banes-lab.com/records/lexicon/connection-cleanup.md): Draining finishes or hands off work in progress, while connection cleanup closes the open connections.

How it is checked

Checked by
[Graceful Shutdown](https://banes-lab.com/records/architecture/graceful-shutdown.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### In-Place Mutation Only

- Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
Upgrading by mutating the running environment in place, with no parallel target to cut over to or fall back from.

Referenced by
[Blue-Green Deployment](https://banes-lab.com/records/architecture/blue-green-deployment.md)

How it is checked

Checked by
[Blue-Green Deployment](https://banes-lab.com/records/architecture/blue-green-deployment.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Incident Reduction

- Kind: [capability](https://banes-lab.com/records/kind/capability.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The ability to reduce the number of incidents that reach human responders by fixing them automatically.

Referenced by
[Auto-Remediation](https://banes-lab.com/records/architecture/auto-remediation.md)

Distinct from
[Reduced Mean Time to Recovery](https://banes-lab.com/records/lexicon/reduced-mean-time-to-recovery.md): Incident reduction lowers how many incidents reach a responder, while reduced mean time to recovery shortens each one that happens.

How it is checked

Checked by
[Auto-Remediation](https://banes-lab.com/records/architecture/auto-remediation.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Infrastructure Cost

- Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The degree to which running two full parallel environments doubles infrastructure cost during a cutover.

Referenced by
[Blue-Green Deployment](https://banes-lab.com/records/architecture/blue-green-deployment.md)

How it is checked

Checked by
the tension resolution with blue-green-deployment

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Irreversible Deployment

- Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
Deploying in a way that cannot be undone, so a bad release cannot be rolled back.

Referenced by
[Rollback](https://banes-lab.com/records/architecture/rollback.md)

Distinct from
[Irreversible Migration](https://banes-lab.com/records/architecture/irreversible-migration.md): An irreversible deployment cannot roll back a release, while an irreversible migration cannot roll back a schema or data change.

How it is checked

Checked by
[Rollback](https://banes-lab.com/records/architecture/rollback.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Lifecycle Signals

- Kind: [constraint](https://banes-lab.com/records/kind/constraint.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The requirement that a process receive lifecycle signals telling it when to start draining and stop.

Referenced by
[Graceful Shutdown](https://banes-lab.com/records/architecture/graceful-shutdown.md)

How it is checked

Checked by
[Graceful Shutdown](https://banes-lab.com/records/architecture/graceful-shutdown.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Low-Risk Cutover

- Kind: [capability](https://banes-lab.com/records/kind/capability.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The ability to switch traffic to a new version with low risk by keeping the old one ready to fall back to.

Referenced by
[Blue-Green Deployment](https://banes-lab.com/records/architecture/blue-green-deployment.md)

How it is checked

Checked by
[Blue-Green Deployment](https://banes-lab.com/records/architecture/blue-green-deployment.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Manual Remediation

- Kind: [approach](https://banes-lab.com/records/kind/approach.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
Recovering from incidents through human-operated fixes, rather than automated remediation.

Referenced by
[Auto-Remediation](https://banes-lab.com/records/architecture/auto-remediation.md)

How it is checked

Checked by
the tension resolution with auto-remediation

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Multiple Physical Disks

- Kind: [constraint](https://banes-lab.com/records/kind/constraint.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The requirement that data span several physical disks so redundancy can survive a single-disk loss.

Referenced by
[RAID Redundancy](https://banes-lab.com/records/architecture/raid-redundancy.md)

How it is checked

Checked by
[RAID Redundancy](https://banes-lab.com/records/architecture/raid-redundancy.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Observable Health Criteria

- Kind: [constraint](https://banes-lab.com/records/kind/constraint.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The requirement that explicit, observable criteria define when a component counts as healthy.

Referenced by
[Health Checks](https://banes-lab.com/records/architecture/health-checks.md)

How it is checked

Checked by
[Health Checks](https://banes-lab.com/records/architecture/health-checks.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Parallel Environments

- Kind: [constraint](https://banes-lab.com/records/kind/constraint.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The requirement that two full production-equivalent environments run side by side for cutover.

Referenced by
[Blue-Green Deployment](https://banes-lab.com/records/architecture/blue-green-deployment.md)

How it is checked

Checked by
[Blue-Green Deployment](https://banes-lab.com/records/architecture/blue-green-deployment.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Parity-Based Recovery

- Kind: [capability](https://banes-lab.com/records/kind/capability.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The ability to reconstruct lost data from parity information stored across the disk array.

Referenced by
[RAID Redundancy](https://banes-lab.com/records/architecture/raid-redundancy.md)

How it is checked

Checked by
[RAID Redundancy](https://banes-lab.com/records/architecture/raid-redundancy.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Production Risk

- Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The degree to which deliberately injecting faults in production risks causing user-facing incidents.

Referenced by
[Chaos Engineering](https://banes-lab.com/records/architecture/chaos-engineering.md)

How it is checked

Checked by
the tension resolution with chaos-engineering

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Progressive Delivery

- Kind: [approach](https://banes-lab.com/records/kind/approach.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
A release strategy that rolls out changes gradually to widening audiences while monitoring for regressions.

Referenced by
[Canary Deployment](https://banes-lab.com/records/architecture/canary-deployment.md)

How it is checked

Checked by
[Canary Deployment](https://banes-lab.com/records/architecture/canary-deployment.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Read Scaling

- Kind: [capability](https://banes-lab.com/records/kind/capability.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The ability to serve more read traffic by distributing it across replicas.

Referenced by
[Replication](https://banes-lab.com/records/architecture/replication.md)

How it is checked

Checked by
[Replication](https://banes-lab.com/records/architecture/replication.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Readiness/Liveness Routing

- Kind: [capability](https://banes-lab.com/records/kind/capability.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The ability to route traffic only to instances that report themselves ready and alive.

Referenced by
[Health Checks](https://banes-lab.com/records/architecture/health-checks.md)

How it is checked

Checked by
[Health Checks](https://banes-lab.com/records/architecture/health-checks.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Reduced Mean Time to Recovery

- Kind: [capability](https://banes-lab.com/records/kind/capability.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The ability to shorten the mean time to recover from a failure by acting automatically.

Referenced by
[Auto-Remediation](https://banes-lab.com/records/architecture/auto-remediation.md)

How it is checked

Checked by
[Auto-Remediation](https://banes-lab.com/records/architecture/auto-remediation.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Remediation Workflow

- Kind: [activity](https://banes-lab.com/records/kind/activity.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
A defined corrective action, or sequence of steps, carried out to return a system to a healthy state after a fault is detected.

Aliases
Remediation Action

Referenced by
[Auto-Remediation](https://banes-lab.com/records/architecture/auto-remediation.md)

How it is checked

Checked by
[Auto-Remediation](https://banes-lab.com/records/architecture/auto-remediation.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Replication or Alternate Capacity

- Kind: [constraint](https://banes-lab.com/records/kind/constraint.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The requirement that duplicate copies or spare capacity exist to take over when a component fails.

Referenced by
[Redundancy](https://banes-lab.com/records/architecture/redundancy.md)

How it is checked

Checked by
[Redundancy](https://banes-lab.com/records/architecture/redundancy.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Reversible Deployment

- Kind: [constraint](https://banes-lab.com/records/kind/constraint.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The requirement that a deployment be structured so it can be safely reverted to a prior version.

Referenced by
[Rollback](https://banes-lab.com/records/architecture/rollback.md)

How it is checked

Checked by
[Rollback](https://banes-lab.com/records/architecture/rollback.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Rollout Complexity

- Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The degree to which staging a release in gradual increments adds orchestration complexity.

Referenced by
[Canary Deployment](https://banes-lab.com/records/architecture/canary-deployment.md)

How it is checked

Checked by
the tension resolution with canary-deployment

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Shutdown Latency

- Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The degree to which draining in-flight work before exit lengthens the time a shutdown takes.

Referenced by
[Graceful Shutdown](https://banes-lab.com/records/architecture/graceful-shutdown.md)

How it is checked

Checked by
the tension resolution with graceful-shutdown

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Single Copy State

- Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
Keeping only one copy of state, so its loss or unavailability takes down the whole system.

Referenced by
[Replication](https://banes-lab.com/records/architecture/replication.md)

How it is checked

Checked by
[Replication](https://banes-lab.com/records/architecture/replication.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Single Instance Dependency

- Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
Depending on a single instance with no standby, so its failure takes down the whole service.

Referenced by
[Failover](https://banes-lab.com/records/architecture/failover.md)

How it is checked

Checked by
[Failover](https://banes-lab.com/records/architecture/failover.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Single-Disk Point of Failure

- Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
Storing data on a single disk with no redundancy, so that one disk's failure loses everything.

Referenced by
[RAID Redundancy](https://banes-lab.com/records/architecture/raid-redundancy.md)

How it is checked

Checked by
[RAID Redundancy](https://banes-lab.com/records/architecture/raid-redundancy.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Traffic Splitting

- Kind: [mechanism](https://banes-lab.com/records/kind/mechanism.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
A facility that routes a configurable proportion of traffic to different versions of a service.

Referenced by
[Canary Deployment](https://banes-lab.com/records/architecture/canary-deployment.md)

How it is checked

Checked by
[Canary Deployment](https://banes-lab.com/records/architecture/canary-deployment.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Unsafe Automation

- Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The degree to which automated remediation may take wrong or harmful corrective actions, for example on a faulty signal, faster than the developer can intervene.

Aliases
Automation Risk, False Recovery Actions

Referenced by
[Self-Healing Architecture](https://banes-lab.com/records/architecture/self-healing-architecture.md), [Auto-Remediation](https://banes-lab.com/records/architecture/auto-remediation.md)

How it is checked

Checked by
the tension resolution with self-healing-architecture, the tension resolution with auto-remediation

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Untested Failure Assumptions

- Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
Assuming a system will survive failures without ever testing those assumptions against injected faults.

Referenced by
[Chaos Engineering](https://banes-lab.com/records/architecture/chaos-engineering.md)

How it is checked

Checked by
[Chaos Engineering](https://banes-lab.com/records/architecture/chaos-engineering.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Versioned Artifact

- Kind: [artifact](https://banes-lab.com/records/kind/artifact.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
A build artifact tagged with a distinct version so a prior one can be redeployed.

Referenced by
[Rollback](https://banes-lab.com/records/architecture/rollback.md)

How it is checked

Checked by
[Rollback](https://banes-lab.com/records/architecture/rollback.md)

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

### Write Amplification

- Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md)
- Category: [Self-Healing / Recovery / Deployment Safety](https://banes-lab.com/ontology/lexicon/lexicon-category-self-healing-recovery-deployment-safety.md)
- Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)

Details

Definition
The degree to which maintaining parity on writes multiplies the underlying disk writes for each logical write.

Referenced by
[RAID Redundancy](https://banes-lab.com/records/architecture/raid-redundancy.md)

How it is checked

Checked by
the tension resolution with raid-redundancy

Population
The term's definition and every architecture edge that names the term

Freshness
A verdict stands until the definition, the term's kind or an edge that names it changes

Refusal
The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind

Observation
The resolution validator's pass over every edge target and every definition opening

Evidence
Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass

Authoritative side
The term record, which every edge that names the term cites

Depends on
Not answered

Shape it refuses
Not answered

## Links to

- [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md)
- [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md)
- [Health Checks](https://banes-lab.com/records/architecture/health-checks.md)
- [capability](https://banes-lab.com/records/kind/capability.md)
- [Graceful Shutdown](https://banes-lab.com/records/architecture/graceful-shutdown.md)
- [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md)
- [Replication](https://banes-lab.com/records/architecture/replication.md)
- [constraint](https://banes-lab.com/records/kind/constraint.md)
- [Failover](https://banes-lab.com/records/architecture/failover.md)
- [Canary Deployment](https://banes-lab.com/records/architecture/canary-deployment.md)
- [Auto-Scaling](https://banes-lab.com/records/architecture/auto-scaling.md)
- [Rollback](https://banes-lab.com/records/architecture/rollback.md)
- [RAID Redundancy](https://banes-lab.com/records/architecture/raid-redundancy.md)
- [Parity-Based Recovery](https://banes-lab.com/records/lexicon/parity-based-recovery.md)
- [Chaos Engineering](https://banes-lab.com/records/architecture/chaos-engineering.md)
- [approach](https://banes-lab.com/records/kind/approach.md)
- [artifact](https://banes-lab.com/records/kind/artifact.md)
- [Auto-Remediation](https://banes-lab.com/records/architecture/auto-remediation.md)
- [Connection Cleanup](https://banes-lab.com/records/lexicon/connection-cleanup.md)
- [Blue-Green Deployment](https://banes-lab.com/records/architecture/blue-green-deployment.md)
- [Reduced Mean Time to Recovery](https://banes-lab.com/records/lexicon/reduced-mean-time-to-recovery.md)
- [Irreversible Migration](https://banes-lab.com/records/architecture/irreversible-migration.md)
- [activity](https://banes-lab.com/records/kind/activity.md)
- [Redundancy](https://banes-lab.com/records/architecture/redundancy.md)
- [mechanism](https://banes-lab.com/records/kind/mechanism.md)
- [Self-Healing Architecture](https://banes-lab.com/records/architecture/self-healing-architecture.md)
