Preview and production

A generated source archive is built once, scanned for secrets, and deployed as a non-serving Cloudflare Preview version. Promotion references that same verified artifact.

Render → Build → Secret scan → Preview → Verify → Promote
                                      ↘ Rollback

Rollback changes traffic. It does not rewrite application data.