What the Deployer agent does
Every high-risk command is intercepted and held pending explicit approval from an authorized user.
First-class Terraform modules for AWS ECS, Azure App Service, GCP Cloud Run, and Kubernetes.
Rejected commands trigger automatic rollback to the last known-good state with an audit log entry.
Every gate interaction is written to an append-only log: approver identity, timestamp, command text, and resource diff.
Pattern-matched interception covers terraform apply, kubectl apply, helm upgrade, and configurable custom patterns.
How it works
Pipeline is configured automatically
The Deployer reads your infrastructure config and target environment, then builds the release pipeline without manual YAML authoring.
High-risk commands are intercepted
Before any command runs against a real environment, the Deployer surfaces the full plan — what will change, in which environment, and at what scope.
You approve, it executes
One click approves the deployment. Rejection triggers rollback. Every decision is logged with your identity and a full audit trail.