Files
atelier/domains/devops/first-principles.md
T
Jon Chery 496303471d docs(milestone): complete v0.1 — initial framework
---ci---
project: atelier
phase: 7
milestone: v0.1
status: complete
phase_role: final
milestone_complete: true
requirements:
  covered: [ATELIER-01, ATELIER-02, ATELIER-03, ATELIER-04, ATELIER-05, ATELIER-06, ATELIER-07, ATELIER-08, ATELIER-09, ATELIER-10, ATELIER-11, ATELIER-12, ATELIER-13, ATELIER-14, ATELIER-15, ATELIER-16, ATELIER-17, ATELIER-18, ATELIER-19, ATELIER-20, ATELIER-21, ATELIER-22, ATELIER-23, ATELIER-24, ATELIER-25, ATELIER-26, ATELIER-27, ATELIER-28, ATELIER-29, ATELIER-30, ATELIER-31, ATELIER-32, ATELIER-33, ATELIER-34, ATELIER-35]
  partial: []
ship:
  milestone: v0.1
  type: NFR
  tag: v0.0.7
  merge: milestone/v0.1-atelier -> main
  release: https://git.cloudinit.dev/cloudinit-bot/atelier/releases/tag/v0.0.7
---/ci---

Milestone v0.1 — Initial Framework (NFR, complete).
8 core principles (C1-C8), 11 domains, 110 domain principles, 27 derived docs, 4 good + 3 bad examples, 4 language docs, full matrix, 3 review docs.
All 35 requirements covered. 7 patches (v0.0.0 pre-execution through v0.0.7 final). v0.0.7 IS the v0.1.0 milestone release.
2026-08-05 00:36:55 +00:00

1.2 KiB

DevOps — First Principles

1. The Principles

P1. Reproducibility

Any environment can be rebuilt from source. Configuration is declarative and versioned.

P2. Automation

Manual steps are bugs waiting to happen. Everything is scripted, testable, repeatable.

P3. Observability

You cannot operate what you cannot see. Logs, metrics, and traces are first-class.

P4. Rollback First

Every deploy has a known-good rollback path. Rollback is rehearsed, not improvised.

P5. Progressive Delivery

Changes go out gradually — canary, blue-green, feature flags. Big-bang deploys are for prototypes.

P6. Configuration as Code

No snowflake servers. No "this one is different". Configuration is in the repo.

P7. Immutability

Build once, deploy many. Artifacts are immutable. Servers are not mutated in place.

P8. Security at Every Layer

Scanning, signing, SBOM, and supply chain integrity are part of the pipeline, not bolt-ons.

P9. Documentation in the Pipeline

The pipeline is the documentation. Reading the pipeline tells you how the system ships.

P10. Failure as Expected

Design for the failure mode, not the happy path. Chaos engineering is a discipline.