Progressive Delivery Without the Drama

Canaries, feature flags and automated rollback sound great until the first incident where all three disagree. Here is the decision tree we use, the four metrics that actually gate a rollout, and the postmortem that made us delete half our tooling.