Deterministic releases

A deterministic release is the same artifact, pinned and promoted unchanged.

Relpin publishes content-addressed releases: every publish canonicalizes the bundle, hashes it with SHA-256, and pins it to exact platform and org schema versions. The same artifact is promoted across environments instead of rebuilt.

Search intent deterministic releases content-addressed releases pinned release artifact
releases · record PROD
Release record pinned
ARTIFACT
sha256:9f2c4e81…d41a1
PLATFORM SCHEMA
v41 · pinned
ORG SCHEMA
v7 · pinned
APPROVALS
bound to artifact hash

identical content re-publishes as a no-op · version records append-only

Category position

Most internal tool platforms ship whatever the editor currently holds. A deterministic release pins an exact artifact hash to an exact schema version, so what was reviewed in TEST is byte-for-byte what runs in PROD.

How to evaluate
01

Content-addressed by construction

Every publish canonicalizes the bundle to stable JSON and hashes it with SHA-256. The hash is the identity of the release, so identical content re-publishes as a no-op and there is no ambiguity about which artifact a version record points to.

02

Pinned to platform and org schema versions

Version records are append-only and pinned to the exact platform version and org schema version they were built against. A release is not a moving pointer to the latest editor state; it is a fixed artifact tied to the schema it expects.

03

The same artifact is promoted, not rebuilt

DEV, TEST, and PROD share one content-addressed artifact. Promotion clones that exact artifact to the target environment instead of rebuilding, and fails closed on schema drift re-verified at apply time. Approvals are bound to the artifact hash, so re-planning invalidates them.

Evaluation checklist
  • Publish canonicalizes the bundle and SHA-256 hashes it
  • Identical content re-publishes as a no-op
  • Version records pinned to exact platform and org schema versions
  • The same artifact promoted across DEV, TEST, and PROD
  • Promotion fails closed on schema drift at apply time
  • Approvals bound to the exact artifact hash
Related pages
FAQ

Frequently asked questions.

What is a deterministic release?

In Relpin, a deterministic release is a content-addressed artifact: every publish canonicalizes the bundle to stable JSON, SHA-256 hashes it, and pins the version record to exact platform and org schema versions. The same artifact is promoted across environments rather than rebuilt.

What happens if I publish the same content twice?

Because releases are content-addressed, identical content produces the same SHA-256 hash and re-publishes as a no-op. A new version record is only created when the canonicalized bundle actually changes.

Does Relpin support rollback to a previous release?

Deployment pointers are forward-only; there is no rollback operation. Releases are pinned and promoted forward through DEV, TEST, and PROD, and promotion fails closed on schema drift re-verified at apply time.

Relpin

Govern the tool before it runs production work.