How upgrades work
Pinned versions
You pin to a specific version. Tags are immutable, so the version you pin is the version you keep until you choose to move.
Pre-upgrade migrations
Schema migrations run before the new application version takes traffic. If migrations fail, the upgrade aborts and your existing version keeps serving.
Smoke-test window
Each upgrade includes a recommended smoke-test window — health checks, sign-in, canvas load, model streaming.
Documented rollback
Each release ships with the rollback procedure. Destructive migrations are flagged in release notes.