Deployments
Manual, queued, immutable, and observable.
Admission
Towbar synchronizes the Source, captures the exact commit SHA, manifest digest, app configuration, and server configuration, then returns a deployment ID without holding the API request open.
Promotion
The worker transfers the exact source archive, builds with BuildKit secrets, starts a candidate on a random loopback port, checks health, updates Caddy, verifies public HTTPS, and only then promotes the release.
Recovery
Failed candidates are removed without replacing the current release. Retry creates a new deployment. Rollback redeploys an immutable retained release snapshot. Only current and previous images are kept.