deployment-branch-gated-promotion

Type: regulative

Decision

A platform change must pass the test environment before it reaches production.

Why

Without an enforced gate, a single push can change production infrastructure with no prior validation.

Violations

• Workflow deploying to prod from a non-main branch.
• Production change with no corresponding test deployment.

Anchor

no-human-touch

Implements

• platform

Files

• .github/workflows/platform-Azure-Policy.yml
• .github/workflows/platform-access-control.yml
• .github/workflows/platform-Management-Groups.yml
• .github/workflows/platform-automation.yml

Links

• platform-test-environment (depends-on) — The gate has no target to validate against without the test environment.

← Back to knowledge graph