金丝雀发布(Canary
Release)先向小比例真实流量开放新版本,达标后逐步扩大。它比一次全量上线更早限制故障半径。A canary release exposes a new version to a small share of live traffic
and expands only after it meets its gates. It limits the failure
radius earlier than an all-at-once launch.
01 ·
新菜先给一桌试吃,还是一晚同时换掉所有菜单01 · Do you test a new dish at one table or replace every menu at
once?
新版在 1%
流量上质量更好,但延迟超线、安全门失败。你会因为平均分变高就直接推到
100% 吗?At 1% traffic, the new version scores better on quality but misses
latency and safety gates. Does a higher average justify jumping to
100%?
1%
02把流量从 1% 推到
100%,逐阶段通过质量、延迟与安全三门Push Traffic from 1% to 100% Through Quality, Latency, and Safety
Gates
发布轨道 · 三道门release rail · three gates
状态 AMetric A
—
—
状态 BMetric B
—
—
状态 CMetric C
—
—
所有概率、分数、成本、token
与输出均为固定种子的教学模拟,不代表真实模型输出。把主变量拖回即可复核结论。All probabilities, scores, costs, tokens, and outputs are
fixed-seed teaching simulations, not real model output. Move the
main variable back to verify the conclusion.
03把刚才的变化拆成 4 个零件Break the Change into Four Parts
Canary Release
STAGE
分阶段扩大Staged expansion
流量只在 1%、5%、25%、50%、100%
五个站点推进。Traffic advances through 1%, 5%, 25%, 50%, and 100%
stations.
QUALITY
质量门Quality gate
真实流量样本必须维持任务质量。Live samples must preserve task quality.
LATENCY
延迟门尾延迟不能在扩大时越过上限。
Tail latency must stay below its limit as exposure
grows.undefined
SAFETY
安全门硬安全门不可用质量收益抵消。
Quality gains cannot offset a hard safety gate.undefined
04最小机制:主交互能逐项验证Minimal Mechanism: Verify Each Link in the Interaction
每个流量阶段都重算三门;任一门失败,当前推进被拒绝并自动退回上一稳定阶段。All three gates are recalculated at every exposure stage. If any
gate fails, promotion is rejected and traffic rolls back to the
last stable stage.
请求扩大Request expansion运行三门run three gates
三门全过All gates pass扩大流量expand traffic
任一失败Any gate fails自动回退automatic rollback
05注入安全回退后,仍把流量请求推到 100%Inject a Safety Regression and Still Request 100% Traffic
主动制造失败Create a failure
边界实验Boundary experiment
金丝雀的价值不是显示阶段,而是让失败阶段无法继续扩大,并把流量退回已知稳定点。The value of a canary is not displaying stages. It is preventing
a failed stage from expanding and returning traffic to a known
stable point.
尚未执行。先在主交互中观察正常机制。Not run yet. Observe the normal mechanism in the main interaction
first.
✗ 1% 通过就能直接跳到 100%。Passing 1% permits a jump to 100%.→ ✓ 每个阶段都要重新通过三门。Every stage must pass all three gates again.
✗ 质量更高可以抵消安全门失败。Higher quality offsets a failed safety gate.→ ✓ 安全硬门没有平均或抵消。A hard safety gate has no averaging or offset.
✗ 回退就是把监控图变绿。Rollback means turning the chart green.→ ✓ 真实流量必须回到上一稳定版本。Actual traffic must return to the last stable
version.
06 · 一句话带走06 · One line to keep
金丝雀发布按 1% 到 100%
分阶段扩大真实流量;质量、延迟、安全三门缺一不可,失败即自动回退。Canary release expands live traffic from 1% to 100% in stages.
Quality, latency, and safety must all pass; any failure triggers
automatic rollback.