Programmable Messaging API · View 18 of 22 · Operations
Decisions
- A jurisdictional rule change must take effect without a deployment, which is a requirement — so rule and route data get a reviewed publication path of their own.
- The carrier simulator suite is a blocking gate: late, duplicated, silent and out-of-order receipts are tested before staging, because production cannot produce them on demand.
- Production canaries by route rather than by percentage of traffic, since a route is the unit that actually fails.
Assumptions
- One real carrier test route in staging; development uses simulators only.
- Rule and route publications are effective in the data plane within 30 s, and roll back by moving a version pointer.
Risks
- Data that changes behaviour without a deploy needs the same review as code, or the gate has simply been moved rather than kept.