Policy as Code
Encoding standards as automated admission and plan-time checks instead of review comments.
Nothing written here yet
This topic is part of the curriculum but has no questions, cards or glossary entries so far. The rest of Delivery & Release Engineering may still cover what you are looking for.
Neighbouring topics
Delivery & Release Engineering
General material on getting a change from commit to production safely and often.
No content yetPipeline Architecture
Stages, fan-out, caching, and the difference between a pipeline and a long script.
Build Reproducibility
Pinned inputs and hermetic builds, so one commit cannot produce two different artifacts.
No content yetArtifact Management
Immutable versioned outputs, promotion between repositories, and retention policy.
No content yetEnvironment Strategy
How many environments earn their cost, what each proves, and what none of them prove.
Branching Models
GitFlow, trunk and release branches as delivery constraints rather than Git preferences.
No content yetContinuous Integration Discipline
Integrating to the mainline daily, and the test speed and review culture that requires.
No content yetDeployment Strategies
Rolling, blue-green, canary and shadow, and the traffic and state each one assumes.
No content yetProgressive Delivery
Separating deploy from release, and exposing a change to users in controlled increments.
No content yetRollback & Forward Fix
When reversing is genuinely possible, and designing so that it usually is.
No content yetDatabase Migration Under CD
Expand-contract, backwards-compatible schema change, and migrations that cannot roll back.
No content yetGitOps
Declared desired state in version control, with a reconciler closing the gap continuously.
No content yetIaC Modules & Drift
Reusable infrastructure modules, state ownership, and detecting what changed out of band.
No content yetPipeline Secrets
Short-lived credentials, workload identity, and why the CI system is a prime target.
No content yetSupply-Chain Provenance
SBOMs, signed artifacts, attestation, and knowing what actually went into a build.
No content yetDeployment Gates
Automated verification between stages, and the difference between a gate and a delay.
No content yetFlow Metrics
Work in progress, flow time and flow efficiency — where a change waits rather than moves.
Change Management vs CD
Reconciling CAB-era controls with continuous delivery without pretending either away.
No content yetMulti-Region Rollout
Ordering regions, bake time, and stopping a bad change before it becomes global.