API Gateway Platform  ·  View 05 of 21  ·  People and journeys

Journey — Shipping v2 Without Breaking Anyone

Two troughs: one statistical, one social.

Editable source SVG draw.io All views
API product owner owns one of 120 services Goal — Get everyone onto v2 and turn v1 off, without an incident carrying my name Trigger — A schema change v1 cannot express Done when — v1 sunset on the published date with zero callers left on it 1 · Publish v2 preview 2 · Canary ◆ moment of truth 3 · Deprecate 4 · Chase the tail ◆ moment of truth 5 · Sunset What they do Registers v2 route Splits 1% to v2 Marks v1 deprecated Reads active callers Grants 3 version pins Requests sunset What the platform does Schema becomes the docs Sticky per credential Deprecation + Sunset hdrs Names every live caller Refuses while callers remain How it feels Confident Watchful Exposed Where it hurts 1% may never signal Headers nobody reads Two orgs will not move What answers it Two live versions allowed Auto-revert in 90 s Portal + per-app usage Per-tenant pin, dated Sunset gated on evidence Journey — Shipping v2 Without Breaking Anyone The second trough is social, not technical: the platform's answer is a dated per-tenant pin rather than a slipped date. v 1.0 · owner Integration Platform Architecture · date 2026-09

The finding

  • The first trough is that a 1% canary on a low-traffic route may never produce a statistically meaningful signal — the rollout looks healthy because nothing happened. This is left open as Core Architecture Question 7 and ADR-13.
  • The second trough is not technical: two organisations will not migrate by the sunset date. The platform's answer is a dated per-tenant version pin with an owner, not a slipped date for everyone.
  • Sunset is gated on evidence of zero active callers, or on a recorded override with a name against it.

Assumptions

  • At most three live versions per API, two in the MVP.
  • Canary steps 1% → 5% → 25% → 100%, automatic rollback within 90 s of a breaching signal (assumption).

Risks

  • Deprecation headers are machine-readable and largely unread. The portal's active-caller view is the mechanism that actually moves people, which is why it is an MVP item and not Phase 2.