Ship it safely

The four checks that stop a Tuesday afternoon becoming an incident: review the change, review the migration, find the cause when it still goes wrong, and write it down so it does not happen twice.