Udhyam Labs AI

Delivery engineering

This practice rebuilds the path from a code change to production, so that a release can be made on any working day and reversed within a known time. It covers infrastructure as code, the build and test stages, gradual release, and the telemetry that decides whether a release continues.

Making a release safe enough to do on any working day

A release pipeline, the automated path from a code change to production, can have every stage and still leave the team unwilling to release without a manual check, because no stage measures whether the release is safe. We build test environments from the same code and configuration as production, release gates that a new version must pass before more users receive it, and a rollback, which is a return to the previous version, that is rehearsed and timed.

What the work is planned to deliver

  • Infrastructure defined as code in each environment covered
  • Gradual release gated on error rate, response time and a business signal you choose
  • A rollback rehearsed in production, with its restore time recorded
  • Terraform
  • Pulumi
  • Kubernetes
  • GitHub Actions
  • GitLab CI
  • Argo Rollouts
  • Policy as code
  • OpenTelemetry
One change, commit to production gated on measured signals CommitsignedBuildrepeatableTestrisk basedPreviewprod configCanary5% of trafficReleaseprogressive Canary analysis canary against the stable version, plus a business signal error ratewithin tolerance p99 latencywithin tolerance Every gated signal within tolerancepromote to 25%, then to all traffic Any gated signal outside toleranceroll back automatically, restore time recorded

The drawing follows one change from commit to release. It is held at five percent of traffic until its signals have been judged.

The first step

What the assessment examines, what you provide, and where the risk is

The assessment has a fixed fee and a fixed length, and it ends with written findings that are yours. You can stop there.

The assessment

We read the pipeline, the differences between environments, and the record of recent releases and incidents. You receive a list of the points where a faulty release can pass unseen, a target rollback time, and an ordered plan of changes.

What you provide

You provide read-only access to the pipeline, the repositories and the incident record, and agreement on one or two business signals, such as approval rate, that a release must not move.

Where the risk is

Database changes carry the risk. Code can be rolled back in minutes and a destructive schema change cannot. Schema changes therefore ship as expand, migrate and contract in separate releases, and the contract step, which is the irreversible one, ships only when no version that still reads or writes the old structure is a rollback target.

The method

How the work is done

A pipeline does its job when the team will release through it without a manual check. Four things make that possible. The test environments are built from the same code and configuration as production, and the remaining differences in data volume, traffic and third-party endpoints are written down. The tests fail only when the code is wrong. A release gate compares the new version with the old one on live traffic. The previous version can be restored within a known time.

We build the full path from commit to production. Infrastructure is defined as code and applied identically in each environment, builds use dependencies and base images pinned by digest, so that the same commit is built from the same inputs, and tests are concentrated on the code paths where a fault costs the most. Release is gradual, so that a version which moves a gated signal is withdrawn after reaching a small share of users. Telemetry is tagged with the version, so a regression can be tied to the release that caused it.

A release that is fast and returns success while posting wrong amounts would pass a gate built only on error rate and response time. The gates therefore include the business signals agreed in the assessment. Signals that arrive within minutes, such as error rate, response time and approval rate, gate each canary step, and a step lasts until enough requests have been seen to detect the change we agreed to detect. Signals that arrive later, such as reconciliation breaks, are checked during a hold before full promotion.

We do not operate the pipeline for you after handover. We build the pipeline and the operating procedures, and we run them alongside your team until the handover tests pass. The handover includes a schedule on which your team rehearses the rollback against production, and the support period described under Working with us follows.

Commitsigned, traceable Buildrepeatable Testweighted by risk Test environmentsame config as prod Canary 5%real traffic Full rolloutprogressive automatic rollback when any gated signal leaves its agreed limit, with a timed restore A canary stage that shifts traffic on a timer is missing a measurement. Traffic should be shifted on a signal.
We treat rollback as a requirement with a target time, and it is rehearsed against production on a schedule. A rollback procedure that has not been run recently cannot be relied on, because the system has changed since the procedure was written.
Questions we expect

Questions about delivery engineering

The Working with us page answers the rest. If yours is not there, ask it on the contact page and an engineer will reply.

Who runs the system after handover?

Your team does, from the day the handover tests pass.

You are a new firm. Why would we give you access to production?

You would not need to give us write access at the start. The assessment needs read access to sources that you choose, which can include production telemetry, and no ability to change anything. The analysis runs in a workspace that you create inside your own account, and where a source holds personal or cardholder data you can place a masked or aggregated export in that workspace. The assessment runs under an NDA and is carried out by engineers whose profiles you have seen. If you stop when it ends, you have spent the fixed fee and the cost of any capacity rented for the tests, and you hold findings that any other firm can act on.

How is the work priced?

The assessment has a fixed fee and a fixed length, and both are quoted before it starts. The price of the build is set out in the proposal that follows the assessment. We do not publish rates, because the fee follows the scope.

All ten questions

Describe the problem, and an engineer will reply within one working day

Tell us in general terms what you are trying to do and what has stopped it. If it is not ours to take on, we will say so.

Start a conversation An NDA, yours or ours, is signed before you share any detail of your systems.