Release Management

Process

Step 1: Decide the Release Scope

Confirm what is in, what is out, which findings are accepted, and which conditions would block the release. If a delivery-decision-record exists, anchor the release scope to that recorded branch or PR outcome instead of reconstructing the completion state from memory. Do not carry unresolved scope ambiguity into the deployment window.

Step 2: Make the Go/No-Go Explicit

Summarize readiness across quality, security, performance, and operations. If the release is conditional, name the conditions in plain language instead of relying on implied tribal knowledge.

Step 3: Set Window, Owners, and Communication

Define:

• release window
• responsible owner
• approvers and escalation contacts
• stakeholder communication moments before, during, and after release
• evidence required to declare success or abort

Step 4: Hand Off a Concrete Release Plan

Produce a release plan that downstream deployment planning can execute. The plan should say what will ship, when, who coordinates, which checks gate expansion, and what happens if the release is paused.

Outputs

• release-plan -- Scope, go/no-go status, owners, release window, communications, and gating expectations for deployment.

Quality Gate

• Release scope and known exclusions are explicit
• Go/no-go decision is documented with rationale
• Owners, approvers, and escalation path are named
• Communication moments and success criteria are defined
• The plan is concrete enough for deployment strategy to execute

Anti-Patterns

1. Deployment as release management -- assuming the pipeline alone coordinates people, timing, and risk.
2. Implicit go/no-go -- shipping because nobody objected rather than because readiness was decided.
3. No communication owner -- technical readiness exists, but stakeholders do not know what is happening.
4. Carrying unresolved findings silently -- letting accepted risk exist only in meeting memory.

Related Skills

• testing-strategy -- provides the core quality evidence
• security-audit -- surfaces release-blocking or accepted security findings
• deployment-strategy -- executes the release with a concrete rollout plan
• runbooks -- receives the deployment and escalation procedures required during release