Canary release

A canary release sends a new version to a small share of traffic first — a few per cent of users — and watches the error rate and performance before rolling it out to everyone.

It catches what testing cannot: behaviour that only appears with real users, real data volumes and real traffic patterns. A fault that would have affected every customer affects two per cent of them for ten minutes instead.

It requires the monitoring to notice, which is the part most often missing. A canary nobody is measuring is just a slower deployment, and an automatic rollback on a metric threshold is what makes the practice worth its complexity.