/silver:deploy

Specialized DevOps live rollout workflow — blast-radius assessment mandatory before any production promotion, then verify, secure, and ship gates.

Overview

/silver:deploy is the Silver Bullet orchestrator for live production rollouts — promoting already-built artifacts to production or equivalent live environments. It maps to catalog entity WF-SILVER-DEPLOY (specialized type) in the v0.48.3 APO catalog.

Unlike /silver:devops, which covers the full IaC change lifecycle (plan, execute, post-exec gates), deploy assumes implementation is complete and focuses on promotion safety. Blast-radius assessment is always first — no ship gate passes without documented downstream impact and rollback posture.

Standard composition:

AF-BLAST-RADIUS → AF-VERIFY → AF-SECURE → AF-SHIP

For infrastructure changes (Terraform, pipelines, new resources), use /silver:devops. For partial traffic rollouts, use /silver:canary.

Not a planning workflow. WF-SILVER-DEPLOY deliberately omits AF-PLAN and AF-EXECUTE. If the artifact is not built, tested, and reviewed, route to /silver:devops or /silver:feature first.

When to Use

Entry trigger signals for /silver:deploy and deploy:

  • Production or live-environment promotion of a reviewed artifact
  • "ship to prod" / "roll out" / "go live" with existing build artifacts
  • Post-merge deployment when CI has produced deployable output
  • Coordinated multi-service rollout requiring blast-radius documentation

Catalog Composition

Atomic flowCommandOutcome
AF-BLAST-RADIUS/silver:blast-radiusImpact map, failure scenarios, rollback plan, change-window risk
AF-VERIFY/silver:verifyPre-promotion verification — smoke tests, health checks, deployment dry-run evidence
AF-SECURE/silver:secureSecurity and LLM-safety gate before live exposure
AF-SHIP/silver:shipShip readiness — branch hygiene, completion audit, promotion execution

Workflow Steps

AF-BLAST-RADIUS — Assess promotion impact

Mandatory first step. Documents affected services, data paths, rollback triggers, and operator runbook. HIGH or CRITICAL ratings require explicit approval evidence before proceeding.

AF-VERIFY — Pre-promotion verification

Confirms the artifact matches the intended release: version pins, config diffs, staging parity, and automated verification results.

AF-SECURE — Security gate

Final security pass — secrets exposure, IAM boundaries, network policy, and supply-chain checks relevant to the live promotion.

AF-SHIP — Execute promotion

Runs ship readiness checks, records completion audit evidence, and executes the promotion with traceable rollback instructions.

Example Invocation

/silver:deploy Promote v2.4.1 API container to production after staging sign-off

Silver Bullet routes to WF-SILVER-DEPLOY. /silver:blast-radius documents multi-service impact. Verification confirms staging parity. Security gate passes. /silver:ship executes the production promotion with rollback evidence on record.