Create private snapshot
Build from one authenticated package; deny public and crawler access.
Governed staging and promotion
See exactly what will publish—before it can publish.
A private immutable snapshot separates rendering review from public release. Source lineage, automated evidence, human approval, effective time, sequence reservation, and rollback must converge before promotion.
Preview accessNOT_CONFIGURED
Post-release verifications0
Issue 003 snapshotNOT_CREATED
Public mutationsNone
Compare source to render
Prove every public field maps to the frozen approved revision.
Run platform checks
Validate schema, links, accessibility, SEO, security, search, and visual output.
Review privately
Give authorised reviewers a time-bounded immutable preview.
Verify rollback
Prove the named prior snapshot restores routes, search, sitemap, and authority.
Collect separated approvals
Requester, staging, promotion, and security identities remain distinct.
Reserve sequence
Prevent concurrent or replayed packages from overtaking the candidate.
Promote atomically
Activate content, route, search, sitemap, citations, and navigation together.
Verify production
Check public route, indexes, metadata, monitoring, and effective version.
Close or rollback
Record evidence or restore the verified target through incident authority.
Verification matrix
Warnings cannot masquerade as release evidence.
Every required control must record a passing evidence identifier, accountable executor, and completion time. Missing, warning, or failed evidence blocks promotion.
Source-to-render integrity
Review presentation without rewriting truth.
The diff compares the approved canonical fields with headings, body, metadata, citations, structured data, search document, sitemap entry, and navigation generated for the preview. Any unexplained difference rejects the snapshot.
- 01Frozen source revision
- 02Canonical content record
- 03Rendered private route
- 04Search and discovery output
- 05Reviewer evidence
Atomic promotion
No half-published issue.
Promotion updates the public route, knowledge index, search, sitemap, citations, and navigation as one snapshot. Production verification begins immediately. A failed critical check triggers the separated rollback workflow to the already verified target.
Signing trust →P010/P011 export pack →Operational evidence →Recovery architecture →