Cut median promotion time from 34 minutes to 38 seconds across 41 services.

Promotion was four bash scripts, run in an order that lived in one engineer's head. Which version sat in which environment was tracked in a shared spreadsheet, updated by hand and wrong often enough that nobody fully trusted it. Anything urgent went through a Slack channel where an approval was a thumbs-up emoji, and every November the team declared a peak-season code freeze because it was the only way to be confident nothing would move unexpectedly.

The 41 services were described once, as a single pipeline file per repository, with staging, canary and production inheriting shared configuration rather than redefining it. The scripts were deleted rather than wrapped. Approvals moved from the Slack channel into policy: a rule about who may promote to production, evaluated automatically, instead of a person remembering to ask.

Median promotion is 38 seconds, down from 34 minutes, and the spreadsheet is gone — the environment view is the record. There have been no rollback incidents since the migration, and the December freeze was not declared last year for the first time in six years.