Feature flags

8 in prod · every flag has an owner and an expiry — a flag without a funeral plan is debt

prod inventory

locker-email-fallback100%INC-44

code by email when SMS bounces · owner ops · expires when carrier fix verified (ETA 12 Sep 6pm) · kill used 11 Sep 5:20pm (ON)

cms-hero-ab50 / 50

AW26 hero variant B (model shot) · owner growth · auto-resolves 18 Sep 9:00am · winner publishes via CMS queue

fraud-model-v3shadow 50%

scores logged, not enforced · owner fraud desk · compare vs v2 through 30 Sep · tonight's 08402 (71) scored by v2

size-guide-v20% · gated

cm table + between-sizes callout · owner CX · gate: a11y review + 2nd approver · planned 100% before Spring Flash

spring-landingscheduled

/spring page + nav entry · owner Maya · flips 25 Sep 00:00 with CMS swap · unflips 3 Oct 23:59

sameday-promise-auto-pausearmed

pauses 2pm promise if pick queue > 400 · owner ops · triggered 0× this quarter (tonight queue 12)

afterpay-checkout100%

BNPL option at payment step · owner finance · permanent candidate (remove flag by 30 Sep)

maintenance-bannerscheduled

storefront banner for Sun 14 Sep 2–4am stocktake sync · owner ops · shows from Fri 12 Sep 6pm

Flag debt report

afterpay-checkout112d old

legacy-zip-checkout204d · 100% · remove

Rule: at 90 days a flag is either deleted (feature permanent) or re-approved with a new expiry. The report runs Mondays; ignoring it twice pages the CTO — that's Dan's own inbox, deliberately.

Kill-switch etiquette

Kill is one click, no deploy — that's the whole point of the flag.

Every kill writes an audit entry + starts a post-incident note template pre-filled with rollout %.

Rollout changes > 25pts need owner + one other human; kills never do (speed beats ceremony when money's moving).

Tonight's posture

Flags evaluated / min: 41,208
p99 evaluation latency: 3ms (local cache)
Drift incidents: 0 since Mar
Staging parity: 7/8 (size-guide gated here too)