Why this matters
Safe rollout reduces incident blast radius and MTTR.
If the change is risky or user-facing, describe the feature flag, rollout plan (stages/segments), monitoring signals, and a clear rollback procedure.
Safe rollout reduces incident blast radius and MTTR.
Side-by-side examples engineers can pattern-match during review.
Ship all at once, no rollback plan.Flag: checkout.lazy_widget
Rollout: 5% → 25% → 100%
Monitor: error rate, CLS
Rollback: disable flag; revert commit X if needed.No flags, no planFlag + staged rollout + rollbackFrom the same buckets as this rule.
If the PR claims to fix a specific issue (e.g., 'Fixes #123' / 'Fix PAY-123'), validate it against the real production error. - If an observability MCP is available (Sentry/Datadog/Bugsnag): fetch the event/stack trace and confirm the change addresses the root cause. - Require a regression test (or a clearly documented reason why a test cannot be added). Call out fixes that only hide symptoms (catch-and-ignore, broader retries, defaulting values) without removing the underlying failure mode.