No-Code SaaS Automation Platform · View 16 of 21 · Operations
Decisions
- 'Replay class declared' is a hard release gate that rejects the manifest. Every execution guarantee in views 12 and 14 is derived from that field, so an unclassified action would silently degrade the platform's correctness promise.
- Contract tests run against provider sandboxes rather than mocks, because the failure being guarded against is the provider's response shape changing, which a mock cannot notice.
- Deprecation is a notice with per-workspace impact, not a date in a changelog: the affected authors are knowable from the definition registry and must be told.
Assumptions
- A deprecated connector version stays executable until its end-of-life date, plus 90 days of retention after.
- Production canary at 1% of runs, which for a rarely-firing long tail means a canary is measured in hours, not minutes.
Risks
- The connector developer's incentive is to ship, and the replay class is self-declared. A wrong declaration is indistinguishable from a correct one until an effect is duplicated in a customer's system.