release-planner — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited release-planner (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill to produce a complete, actionable release execution plan — the final stage artifact that bridges technical deployment readiness with operational coordination and stakeholder communication.
This skill is not a deployment checklist. It is a first-class planning artifact that integrates rollout waves, migration sequencing, risk mitigation, validation checkpoints, rollback strategy, observability, and communication into a single coherent plan.
This skill is domain-generic. It must work for any software release without embedding project-specific context, vendor names, or product names.
Use this skill when the user asks to:
Do not use this skill for application architecture, source-code implementation, product strategy, or project scheduling. Keep the output at release execution planning level.
A complete release plan must contain all five of these artifacts:
| Artifact | Purpose | Output |
|---|---|---|
| 1. Deployment Sequence | Ordered list of what goes out first, second, and last — and why | deployment-order.md — dependency graph with rationale |
| 2. Migration Plan | How data and schema change safely across waves | migration-plan.md — backward-compatible migration steps |
| 3. Rollout Waves | How exposure grows from zero to full across time segments | wave-plan.md — wave sizes, segmentation strategy, gate criteria |
| 4. Risk Mitigation | Blast radius, compatibility risks, and mitigations per wave | risk-mitigation.md — per-wave risk register |
| 5. Rollback Strategy | Decision criteria, procedures, and ownership for reverting each wave | rollback-plan.md — criteria, steps, owner per wave |
The ordered list of deployment steps required to put the release into production. Each step documents what is deployed, what dependencies it has, and what state the system is in after the step.
## Deployment Sequence
| Step | Component | Action | Pre-condition | Post-condition | Rollback |
|---|---|---|---|---|---|
| 1 | Database schema | Apply add-only migrations | Schema version N | Schema version N+1 (additive only) | Revert migration |
| 2 | Configuration | Deploy feature flag config | Flag off | Flag available in off state | Revert flag config |
| 3 | Application (read-only services) | Deploy new version | Old version serving reads | New version serving reads, no new writes | Redeploy old version |
| 4 | Application (write services) | Deploy new version | Write path on old version | Write path on new version | Redeploy old version |
| 5 | Migration completion | Enable new schema paths | Old and new paths both functional | New path exclusive | Revert migration + redeploy old app |The plan for safely evolving data and schema across release waves. Covers database schema changes, data transformations, and any dual-write or dual-read patterns.
Use this three-phase pattern for any schema change that would otherwise be breaking:
Phase 1 — Expand (add new but keep old):
Phase 2 — Migrate (verify data):
Phase 3 — Contract (remove old):
| Situation | Rule |
|---|---|
| Dropping a column or table | Never without at least one full release cycle of deprecation warning |
| Renaming a column | Use add + dual-write + migrate + contract pattern |
| Changing a data type | Expand first; migrate data; contract old type only after full wave success |
| Adding an index | Online index creation preferred; avoid table locks; schedule during low-traffic |
| Large data migration (>10M rows) | Run as background batch job per wave; never in a blocking transaction |
| Schema change that breaks old code | Must be resolved before wave 1; flag as blocking |
## Migration Plan
### Schema Changes
| Step | Change | Compatibility | Wave | Rollback |
### Data Migrations
| Step | Query/Job | Volume | Blocking? | Batch Size | Wave |
### Dual-Write / Dual-Read Pattern
| Phase | State | Application Behavior |
|---|---|---|
| Expand | Both schemas writable | Write to old and new |
| Migrate | New primary, old verify | Read both; compare; log mismatches |
| Contract | New exclusive | Stop writing to old |The progressive increase in user or traffic exposure across defined waves. Each wave is gated by validation checkpoints before the next wave begins.
| Risk Profile | Wave 1 Size | Subsequent Waves |
|---|---|---|
| Low risk (bug fix, config-only, fully featured flag) | 1–5% or internal users | 10%, 25%, 50%, 100% |
| Medium risk (new feature, schema change) | 0.5–1% external users | 5%, 15%, 50%, 100% |
| High risk (breaking change, data migration, new service) | Internal-only or canary | 1%, 5%, 25%, 100% |
Choose the segmentation that best matches the risk and the system's user topology:
Before each wave advances, all of these must be true:
| Gate | Threshold |
|---|---|
| Error rate delta | < +0.5% above baseline |
| Latency p99 delta | < +10% above baseline |
| Business KPI deviation | Within ±5% of baseline window |
| Monitoring coverage | 100% of critical paths instrumented |
| Rollback readiness | Rollback procedure tested and documented |
| Stakeholder sign-off | Authorized before wave 3+ |
## Rollout Waves
### Wave Definition
| Wave | Segment | Size | Trigger | Hold Duration |
### Traffic Segmentation
| Segment | Strategy | Size | Instruments |
### Wave Gate Criteria
| Gate | Metric | Threshold | Observation Window |
|---|---|---|---|| Change Type | Blast Radius | Mitigation Required |
|---|---|---|
| Pure configuration change | Single service restart | Feature flag, quick rollback |
| New feature (no schema change) | New code only | Canary wave, monitoring active |
| Schema change (additive) | Read path first, then write | Expand/migrate/contract, dual-read verification |
| Breaking schema change | Full system if done wrong | Blocking — resolve before wave 1 |
| Data migration job | Dependent reads/writes | Batch per wave, observability per batch |
| New service dependency | All consumers | Staged rollout with circuit breaker |
| Risk | Classification | Rule |
|---|---|---|
| Old code reads new schema | Backward compatible | Safe to proceed |
| New code writes old schema | Forward compatible | Safe to proceed |
| Old code cannot handle new schema fields | Backward incompatible | Block wave 1 |
| New code assumes new schema (not present in old) | Forward incompatible | Block wave 1 until schema is deployed |
## Risk Mitigation
### Blast Radius by Wave
| Wave | Change | Blast Radius | Affected Components | Mitigation |
### Compatibility Risks
| Risk | Type | Wave Affected | Resolution |
### Data Migration Risks
| Risk | Volume | Mitigation |
|---|---|---|The documented, tested procedure for reverting each wave. Includes decision criteria, rollback triggers, step-by-step procedures, and ownership.
Define explicit, measurable triggers — never subjective:
| Trigger Type | Criteria |
|---|---|
| Error rate | Error rate exceeds +1% above baseline for > 5 minutes |
| Latency | p99 latency exceeds 2× baseline for > 3 minutes |
| Business impact | Conversion rate drops > 10% below baseline |
| Data integrity | Any data loss, corruption, or inconsistent state detected |
| Monitoring failure | Observability goes dark for > 2 minutes during wave |
| Manual override | Designated owner calls rollback based on qualitative judgment |
## Rollback Strategy
### Rollback Triggers
| Trigger | Metric | Threshold | Owner |
### Rollback Procedures
| Wave | Step | Action | Owner | Time Budget |
### Rollback Ownership
| Role | Responsibility |
|---|---|Establish baseline metrics for all critical paths before wave 1:
| Phase | Metrics to Watch | Alert Threshold | Observation Window |
|---|---|---|---|
| Wave 1 | Error rate, latency delta, new code paths | +0.5% errors or +10% latency | 30 minutes minimum |
| Wave 2+ | Same + business KPIs | Same + 5% KPI deviation | 15 minutes minimum |
| Full rollout | All paths stable | Return to baseline | 2 hours monitoring |
When using automated canary analysis tools (Argo Rollouts, Flagger, Spinnaker):
evaluate criteria: error rate threshold, latency threshold.analysisTemplate with minimum weight and step count.autoRollback on analysis failure.## Communication Plan
### Pre-Release
| When | Audience | Channel | Message |
|---|---|---|---|
| T-72h | Engineering leads | Async / Slack | Release scope, wave plan, rollback triggers |
| T-48h | Product / stakeholders | Email / async | Release date, wave timeline, success criteria |
| T-24h | Operations / on-call | Sync / briefing | Monitoring plan, escalation path, contacts |
### During Release
| When | Audience | Channel | Trigger |
|---|---|---|---|
| Before each wave | Release lead | Direct | Go/no-go decision |
| Wave gate pass | Stakeholders | Channel per audience | Gate closed |
| Rollback trigger | Incident response | Pager / Slack | Rollback initiated |
### Post-Release
| When | Audience | Channel | Message |
|---|---|---|---|
| Post-wave 1 | All stakeholders | Email / Slack | Wave 1 complete, metrics summary |
| Full rollout | All stakeholders | Email / Slack | Release complete, metrics summary |
| Post-incident | Stakeholders + leadership | Incident report | Root cause, impact, remediation |For each wave, all of the following must be green before proceeding:
| Criterion | Measure | Owner |
|---|---|---|
| Monitoring active | All critical paths instrumented; dashboards live | Observability / SRE |
| Baseline established | Pre-release metrics captured for comparison | SRE / Metrics |
| Rollback tested | Rollback procedure executed in staging or canary | Engineering lead |
| Database migrations complete | All migration steps verified; data integrity confirmed | DBA / Data lead |
| Feature flags configured | Kill switches and rollback flags in place | Engineering |
| Communication sent | Stakeholders informed of wave timeline | Release coordinator |
| Go/No-Go meeting held | Authorized by designated decision-maker | Release lead |
The skill adapts based on what input artifacts are provided:
| Artifact | Primary Planning Focus |
|---|---|
| Release scope | Deployment sequence, wave sizing, communication plan |
| PRD / SDD / RFC | Migration sequencing, compatibility risks, validation checkpoints |
| Feature flags / rollouts | Rollout waves, canary strategy, kill switch design |
| Deployment architecture | Blast radius per wave, rollback strategy, observability plan |
| Data changes (schema, migration) | Migration plan (expand/migrate/contract), data safety per wave |
| Risk assessment | Risk mitigation section, blast radius per wave, rollback triggers |
| Validation plan | Monitoring checkpoints per wave, go/no-go criteria |
| Release calendar | Communication plan timing, wave gates mapped to calendar |
| Stakeholder constraints | Wave sizing adjusted to constraints; communication plan customized |
If no artifact is provided, ask the user to specify the release scope before producing the plan.
Use this structure for the complete release plan:
# Release Plan: <Release Name>
## 1. Release Overview
- **Scope:** <what is being released>
- **Risk Profile:** <Low / Medium / High / Critical>
- **Wave Count:** <N waves>
- **Communication:** <stakeholder plan summary>
## 2. Deployment Sequence
[Artifact 1]
## 3. Migration Plan
[Artifact 2]
## 4. Rollout Waves
[Artifact 3]
## 5. Risk Mitigation
[Artifact 4]
## 6. Rollback Strategy
[Artifact 5]
## 7. Monitoring and Observability
[Monitoring checkpoints by wave]
## 8. Communication Plan
[Stakeholder communication template]
## 9. Go/No-Go Checklist
[Per-wave go/no-go criteria]
## 10. Integration Summary
<One paragraph: how all five artifacts connect into a coherent release story>Before presenting the release plan, verify:
Lead with the release risk profile and wave count. Present the wave plan first so the user sees the progression from low exposure to full rollout. Then present the rollback strategy so the user understands the safety net before reading the deployment sequence. Highlight any blocking items (incompatible changes, missing observability, absent rollback capability) as these prevent the plan from being actionable. If the release is high-risk, recommend reducing wave 1 size or adding an internal-only wave before external exposure.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.