Deploy reconciliation
Only Versions a merged Change points to run, and any other running fingerprint opens an Incident.
Satisfies
| Criterion | Text |
|---|---|
| SOC2 CC6.8 | The entity prevents or detects the introduction of unauthorized or malicious software. |
| SOC2 CC7.1 | The entity uses detection and monitoring to identify configuration changes and newly discovered vulnerabilities. |
| SOC2 CC8.1 | The entity authorizes, designs, develops, configures, documents, tests, approves and implements changes to infrastructure, data, software and procedures. |
| ISO27001 A.8.9 | Configurations, including security configurations, are established, documented, implemented, monitored and reviewed. |
Implemented by
Test
| Step | Rule |
|---|---|
| Kind | Detective: it finds the failure after it happens. |
| Select | Every running fingerprint across every namespace, sampled each hour. |
| Assert | Each fingerprint matches a Version a merged Change points to, or an Incident opened within one hour. |
Owner
Reliability Engineer, Engineering Team.
Example
A hand-patched worker for an invoice-parsing API runs a fingerprint no merged Change points to. Within the hour an Incident opens, and the worker is replaced by the merged Version.