CI/CD

A DAG of stages, artifacts, and edges.

What to hash, what to store, when to bust.

Pyramid, parallelism, and the cost of flakes.

Rolling, blue/green, canary, and feature flags.

OIDC trust, secret stores, and the leaked-token playbook.

Affected-only builds, build graphs, remote cache.

Registries, signing, retention, and promotion.

Progressive delivery, auto-rollback, and decoupling deploy from release.

SLSA, sigstore, dependency pinning, and the XZ backdoor.