SLO
服务目标Service objective
先定义可接受成功率，预算才有分母。Define acceptable reliability first so the allowance has a denominator.
01 ·
这个月还能承受多少次晚点，才不该继续改线路01 · How many more late trains can this month absorb before route
changes must stop?
团队还有 7 天要上线高风险改版，但本月错误预算只剩 14%。你会继续冲刺，还是先冻结风险发布？A high-risk change is due in seven days, but only 14% of the monthly error budget remains. Do you keep shipping or freeze risky releases?
02播放每日错误，让燃尽线逼近门限并自动冻结高风险发布Play Daily Failures and Watch the Burn Line Trigger a High-risk Release Freeze
发布轨道 · 预算带release rail · budget band
状态 AMetric A
—
—
状态 BMetric B
—
—
状态 CMetric C
—
—
所有概率、分数、成本、token 与输出均为固定种子的教学模拟，不代表真实模型输出。把主变量拖回即可复核结论。All probabilities, scores, costs, tokens, and outputs are fixed-seed teaching simulations, not real model output. Move the main variable back to verify the conclusion.
03把刚才的变化拆成 4 个零件Break the Change into Four Parts
Error BudgetBURN
每日燃尽Daily burn
每一天的超目标失败都从剩余额度中扣除。Each day's above-target failures consume the remaining allowance.
PACE
燃尽速度Burn rate
当前消耗速度要与月份已过比例一起看。Read current consumption against the share of the month already elapsed.
FREEZE
发布冻结Release freeze
预算近耗尽时先暂停高风险变更，低风险修复仍可通行。Near exhaustion, pause high-risk changes while low-risk remediation can proceed.
04最小机制：主交互能逐项验证Minimal Mechanism: Verify Each Link in the Interaction
MECHANISM
budgetleft = allowance − Σ max(0, failuresd − targetd)
主交互逐日累计超出目标的失败；剩余预算低于
15% 时，高风险发布门自动关闭。The interaction accumulates daily failures above target. When
less than 15% remains, the high-risk release gate closes
automatically.
播放一天Play one day写入当日失败record daily failures
更新燃尽线Update burn line扣减剩余额度subtract allowance
接近耗尽Near exhaustion冻结高风险发布freeze risky releases
05快进到预算耗尽，却仍尝试放行高风险改版Fast-forward to Exhaustion and Still Attempt a High-risk Release
主动制造失败Create a failure边界实验Boundary experiment
预算不是装饰性仪表。若燃尽后仍能照常发布，它就没有承担运行治理作用。A budget is not decorative telemetry. If risky releases still pass after exhaustion, it is not governing operations.
尚未执行。先在主交互中观察正常机制。Not run yet. Observe the normal mechanism in the main interaction
first.
✗ 错误预算就是允许团队随便出错。An error budget permits careless failures.→ ✓ 它是带服务目标和自动动作的风险额度。It is a risk allowance tied to an objective and automatic
action.
✗ 月末再看总数就够了。A month-end total is enough.→ ✓ 燃尽速度能在月中提前暴露耗尽风险。Burn rate exposes exhaustion risk before month
end.
✗ 冻结发布等于停止一切工作。A release freeze stops all work.→ ✓ 冻结的是高风险变更，可靠性修复应继续。The freeze targets risky changes; reliability fixes should
continue.
06 · 一句话带走06 · One line to keep