Cell Placement · Rolling Canary
A deterministic hash drops every instance into one of HASH_MAX buckets. A fixed-width window sweeps the bucket space, one dwell-step at a time — whatever it covers right now routes to the Canary Cell. Scrub time to watch the whole fleet rotate through the new release, then back out.
Sensitive instances (Enterprise tier) carry a hardcoded sensitive: true bypass — they are excluded from the hash decision and pinned to Cell 00 forever, regardless of where the window sits.