Chapter 2 of 6
Architecture at a glance#
The customer health control checks the active path against the regional contract. It reports agent version, Entra identity, API Management policy version, endpoint, required trace fields, and whether sensitive input appeared.
The routing control previews the move to the secondary selector. The delivery owner approves the move. The wrapper checks the active secondary path, previews the return, restores the primary selector, and checks the primary path again.
Design choices and tradeoffs#
| Decision | Chosen approach | Benefit | Cost and limitation |
|---|---|---|---|
| Change boundary | Move one named traffic selector | The rehearsal avoids infrastructure and policy changes | The customer routing control must expose that selector |
| Path check | Compare health output with the regional contract | Operators check all required path values together | The health control must return the documented fields |
| Restore | Preview and approve the return move | The team checks the primary path before closing the rehearsal | The delivery owner approves a second traffic move |