Mistake allowance
Each tier may afford a few bad visits per hour. A visit is bad if it fails or is twice as slow as its promise. Spend the allowance and the tier's mode changes, by code.
Core
GREEN80%left
4 bad of 2,721 visits; 20 allowed in the last 60 min
Shipping normally.
Standard
GREEN100%left
0 bad of 477 visits; 20 allowed in the last 60 min
Shipping normally.
Experimental
GREEN100%left
No visits in the last 60 min
Shipping normally.
Whole app
GREEN80%left
4 bad of 3,198 visits; 20 allowed in the last 60 min
Shipping normally.
What the modes do
set by code, never by an agent| Mode | What happens |
|---|---|
| GREEN | Ship normally. |
| YELLOW | Standard and the whole app only: an extra 25% test-drive step and a size cap on changes. |
| RED | New work touching the tier pauses with the reason; P0 and P1 fixes still go through. |
When modes change
separate thresholds to enter and to leave| Tier | Enter | Leave |
|---|---|---|
| Core | Red below 50% | Green above 65% (no Yellow: the gap stops flickering) |
| Standard | Yellow below 50%, Red below 10% | Yellow above 25%, Green above 60% |
| Experimental | Always Green | It can still roll back |
| Whole app | Like Standard, against the service's target | |