A pipeline can automate build and test steps. A release gate blocks deployment until required checks pass. A staging environment supports checks before production. Rollback may restore old code, but it does not automatically undo database changes. Secrets belong in private configuration.
Worked example
Build passed but a required data test failed: the gate stays closed. Restoring an old program after a database format change may not restore compatibility. Plan a backup and a tested recovery procedure before a risky migration.
Fictional Pipeline
Build: pass. Unit tests: 18 passed, 2 failed. Staging smoke test: not run. The policy requires all unit tests and the staging smoke test to pass before release. An API key must not appear in source files, browser code or logs. This is a paper review, not permission to run commands on production.