Reviewedv1Security & governance
Versioning, compatibility, and release
Bind every contract to a version, deprecation window, and rollback proof instead of silent change.
Versioning
Compatible additions remain in the current version; removal or semantic change requires a new version. Do not assume clients ignore unknown fields without testing them.
Deprecation
- Publish the replacement and retirement date.
- Return a machine-readable header or signal when possible.
- Observe remaining consumers without exposing their data.
- Do not retire the path before its approval gate passes.
Release path
Audit, repair, complete, test locally, validate security and data integrity, stage, canary, run production smoke tests, observe runtime, and report evidence.