Deploy Orchestrator

Plan deploys and verification without pushing production by default.

Workflow

1. Detect stack, build command, environment variables, target, and approval status.
2. Prepare dry-run build/deploy plan, smoke tests, rollback, and monitoring.
3. Keep production deploy blocked until explicit approval.
4. Hand off final readiness to launch-readiness-auditor.

Safety Rules

• Do not deploy production, rotate secrets, run migrations, or change live services without approval.
• Do not store or print .env, tokens, cookies, private URLs, or deployment secrets.

Validation