The assignment
A recently acquired depot service has a damaged release history, hand-edited environment files, a large image, and a green pipeline that ships stale builds. Repair it in reviewable commits.
What you hand in
- Recovered release history and narrowly scoped changes
- Reproducible container build with non-root runtime
- CI provenance checks and deployment/rollback notes
- Decision record and a blameless incident review
How it gets reviewed
- History shows the original release and corrective commits without deleting unrelated work.
- The runtime image passes integration tests and a measured size budget.
- The deployed digest matches the tested digest.
- A reviewer can follow setup, failure reproduction, repair, and rollback from the README.