#platform-architecture

Release Freeze is a GitOps term for a period when normal releases are paused to reduce risk. It helps teams, humans, and agents compare declared source state with running systems, then act without pretending a deployment did more than the evidence shows. Source context: OpenGitOps principles.

Repo Per Environment is a GitOps term for a GitOps layout where each environment has its own repository boundary. It helps teams, humans, and agents compare declared source state with running systems, then act without pretending a deployment did more than the evidence shows. Source context: OpenGitOps principles.

Required Check is a GitOps term for a status check that must pass before a source change can merge. It helps teams, humans, and agents compare declared source state with running systems, then act without pretending a deployment did more than the evidence shows. Source context: OpenGitOps principles.

Resource Pruning is a GitOps term for the controlled deletion of unmanaged or removed resources during sync. It helps teams, humans, and agents compare declared source state with running systems, then act without pretending a deployment did more than the evidence shows. Source context: Argo CD documentation.

Roll Forward is a GitOps term for fixing an issue by moving to a newer corrected version instead of going backward. It helps teams, humans, and agents compare declared source state with running systems, then act without pretending a deployment did more than the evidence shows. Source context: Argo CD documentation.

Rollback is a GitOps term for returning to a previous known configuration or artifact version. It helps teams, humans, and agents compare declared source state with running systems, then act without pretending a deployment did more than the evidence shows. Source context: Argo CD documentation.

SBOM Gate is a GitOps term for a release check that requires software bill of materials evidence before promotion. It helps teams, humans, and agents compare declared source state with running systems, then act without pretending a deployment did more than the evidence shows. Source context: OpenGitOps principles.

SOPS is a GitOps term for a file encryption workflow used to protect secrets in GitOps repositories. It helps teams, humans, and agents compare declared source state with running systems, then act without pretending a deployment did more than the evidence shows. Source context: Flux documentation.

Sealed Secrets is a GitOps term for encrypted Kubernetes secrets that a controller can decrypt inside the cluster. It helps teams, humans, and agents compare declared source state with running systems, then act without pretending a deployment did more than the evidence shows. Source context: Argo CD documentation; Flux documentation.

Secret Sealing is a GitOps term for encrypting a secret so it can be safely stored in a repository. It helps teams, humans, and agents compare declared source state with running systems, then act without pretending a deployment did more than the evidence shows. Source context: Argo CD documentation; Flux documentation.

Self-Heal is a GitOps term for automatic correction when live state drifts away from source state. It helps teams, humans, and agents compare declared source state with running systems, then act without pretending a deployment did more than the evidence shows. Source context: Argo CD documentation.

Semver Image Policy is a GitOps term for an image selection rule based on semantic version ranges. It helps teams, humans, and agents compare declared source state with running systems, then act without pretending a deployment did more than the evidence shows. Source context: Flux documentation.

Signed Commit is a GitOps term for a Git commit with cryptographic proof of author or system identity. It helps teams, humans, and agents compare declared source state with running systems, then act without pretending a deployment did more than the evidence shows. Source context: OpenGitOps principles.

Signed Image is a GitOps term for a container image with cryptographic proof attached to the artifact. It helps teams, humans, and agents compare declared source state with running systems, then act without pretending a deployment did more than the evidence shows. Source context: OpenGitOps principles.

Single Source of Truth is a GitOps term for the trusted versioned location agents and people use to decide what should run. It helps teams, humans, and agents compare declared source state with running systems, then act without pretending a deployment did more than the evidence shows. Source context: OpenGitOps principles.

Source Controller is a GitOps term for a Flux controller that fetches and exposes source artifacts. It helps teams, humans, and agents compare declared source state with running systems, then act without pretending a deployment did more than the evidence shows. Source context: Flux documentation.

Source State is a GitOps term for the versioned configuration stored in Git or another trusted source. It helps teams, humans, and agents compare declared source state with running systems, then act without pretending a deployment did more than the evidence shows. Source context: OpenGitOps principles; Argo CD documentation.

Supply Chain Policy is a GitOps term for rules that decide which code, images, dependencies, and sources can be released. It helps teams, humans, and agents compare declared source state with running systems, then act without pretending a deployment did more than the evidence shows. Source context: OpenGitOps principles.

Suspended Reconciliation is a GitOps term for a paused reconciliation loop that leaves state unchanged until resumed. It helps teams, humans, and agents compare declared source state with running systems, then act without pretending a deployment did more than the evidence shows. Source context: Flux documentation.

Sync Hook is a GitOps term for a controlled action that runs at a particular point in a sync lifecycle. It helps teams, humans, and agents compare declared source state with running systems, then act without pretending a deployment did more than the evidence shows. Source context: Argo CD documentation.