# Orchestrator: Deployment

Pre-flight + cut + ship.

## Pipeline (sequential — fail-fast)

```
security-agent (/security-audit diff)
   │  (no high/critical vulns)
   ▼
performance-agent (/perf-audit, smoke only)
   │  (no regressed budgets)
   ▼
release-manager-agent (/release <bump>)
   │  (version + changelog + tag, NOT pushed)
   ▼
[human approval to push]
   │
   ▼
devops-agent (deploy to target env)
   │  (apply migrations, deploy image, verify health)
   ▼
documentation-agent
   (publish release notes; update current-sprint.md)
```

## Stop conditions

- Any blocker from security or perf halts the chain.
- Push to remote and deploy both require explicit human approval — the agent never does them autonomously.

## Output

A deployed version with verified health checks, release notes published, current-sprint updated.
