A Real Deployment Exposed Two Contract Defects Before I Froze the Contract

说明与用途

在真实部署中发现了两个合同缺陷：假设存在的预览环境不存在，以及清单和包摘要之间的循环依赖。修复后验证构建产物与部署内容一致，并冻结合同，建立可重复的发布链。

问题

CI/CD artifacts may not match what is actually deployed, leading to undetected contract defects and insecure releases.

结果

The updated contract and adapter ensured that build artifacts matched deployed content, prevented false positives from missing preview environments, and established a repeatable, verifiable release chain.

工作流

• Review draft contract
• Run adapter against real deployment
• Identify and fix contract defects
• Verify live manifest against sealed bundle
• Freeze contract v0
• Run subsequent releases to confirm repeat‑run linkage

证据

The contract expected a preview that did not exist

来源

The bundle required the finished manifest. The manifest required the finished bundle.

来源

Only after that receipt existed did the contract replace its synthetic dashboard fixture with the real deployed bundle and freeze release-evidence/v0.

来源