Compound AI OpsFOUNDER X14 September 2026
Deployment harness
PRODUCTION STAYED UNCHANGED
coding-agent deployment harness leaves production unchanged
Ops log: Our coding-agent deployment harness builds a repository, then promotes it to production, and three green builds still left production unchanged.
The promote rejected Next.js 15.5.4 as vulnerable after the build passed. The build checked whether the code compiled. The promote checked whether the deployed framework version was safe.
I changed package.json and package-lock.json from 15.5.4 to ^15.5.25. The dependency files, not the build command, carried the missing security fix.
I reran npm run build after the upgrade. The harness now sends the patched Next.js range into the same promote step that had refused the older version.
#dev