Harden immutable release deployment

2026-07-18 02:31:28 +02:00
parent 611ad0cd57
commit 5699006a5e
20 changed files with 477 additions and 151 deletions
@@ -40,6 +40,11 @@
  run reused the same project and dataset identifiers. Browser acceptance then
  exposed and closed a map guard that had prevented coverage-only selection
  when the chosen theme was honestly unavailable.
+- RC-5 deployment hardening started by centralizing Tower release execution,
+  moving build identity behind expensive dependency layers, retaining
+  immutable commit images plus a `previous` rollback target, adding automatic
+  rollback and an isolated fresh-install smoke, and failing closed on default
+  database secrets or inconsistent upload limits.

 - Froze the RC geography as all Belgian land plus the separately labelled
  territorial sea, EEZ and continental shelf.