- Inspect startup logs for a missing manifest, checksum mismatch, vocabulary validation, or strict state-dict errors.
- Verify the complete immutable bundle is mounted at
MODEL_BUNDLE_PATH. - Roll back to the previous image and bundle pair; never mix bundle files.
- Check active requests, inference latency, cache hit rate, CPU, memory, and throttling.
- Stop rollout growth and reduce admission capacity if saturation is increasing.
- Roll back when the canary exceeds its error, fallback, or latency guardrail.
Segment by model version, known-item rate, cold-start cohort, and catalogue segment. Validate feature/vocabulary compatibility and input drift, then restore the previous bundle while retaining impression and outcome evidence.
Checksum failures are non-retryable deployment errors. Quarantine the candidate, regenerate it from the recorded dataset/configuration, and investigate storage or promotion integrity.