Retail leadership proposes a six-week change freeze covering the entire estate from mid-November. Respond.
Show the full answer Hide the answer
What the interviewer is testing
Whether you engage with a legitimate risk control on its own terms and offer something better.
Where leadership is right
The goal is sound and non-negotiable: protect the highest-revenue period of the year. Failure is immediately measurable in lost revenue and there is no possibility of rescheduling.
The mechanism problem
Risk does not pause; it accumulates. Six weeks of changes ship in January as one large batch — more entangled, harder to review, harder to diagnose. The freeze converts many small independent risks into one large correlated one, positioned immediately after the window it protected.
Two secondary effects: the team loses the muscle memory of routine deployment right before the period where an emergency fix is most costly to get wrong; and urgent changes still happen, through an exception path with less scrutiny than the normal pipeline.
What to propose instead
A tightened risk posture for the period, and a narrow freeze where genuinely warranted:
| Control | Normal | Peak period |
|---|---|---|
| Batch size | Normal | Single-purpose changes only |
| Canary bake | 30 minutes | 4 hours |
| Rollout | Standard waves | Slowest wave order |
| Rollback | Available | Armed and automatic on SLO breach |
| Change classes | All | No schema changes, no infrastructure changes, no dependency upgrades |
| Approval | Standard | Named engineering approver for checkout-path changes |
Plus a genuine freeze on the specific systems in the blast radius of peak trading, for the specific peak days — not the whole estate for six weeks.
What must happen regardless
Rehearse the emergency path during the freeze. A path first used during a peak incident is not a path. And pre-scale ahead of the known event rather than relying on autoscaling, which has a reaction time measured in minutes and depends on a control plane that may be stressed.
What a strong answer adds
Offering to measure it: apply the tightened posture to the non-critical portion of the estate this year and compare incident rates against last year's freeze. That gives leadership a way to change their mind without anyone losing an argument.
Common weak answers
"Freezes are an antipattern" with no alternative. Complying and routing urgent changes through an unscrutinised exception path.