Deploy Freezes vs Deploy Windows: Pick the Right Tool

Freezes prevent deploys; windows time them. The decision rule for picking, and the case where teams use the wrong one.

When to freeze

Truly elevated risk: major customer event, post-incident stabilisation, holiday weekend.

Risk so high that any deploy is unwise. Freezes are blunt; use sparingly.

Time-bounded: 24-72 hours. Longer freezes erode delivery rate without proportionate safety gain.

When to window

Normal operations with predictable risk patterns. Deploy during business hours when the team is awake.

Risk is moderate; the constraint is staffing, not absolute risk.

Permanent: 'deploys happen between 9 AM and 4 PM.' Daily rhythm.

Common wrong choices

Permanent freezes that should be windows. The team accumulates change debt; the eventual deploy is huge and risky.

Windows that should be freezes during truly high-risk periods. The window is too permissive; deploys go through that should not.

Multiple overlapping policies. Confusion about what is currently in effect; deploys happen against the gut feel of whoever is on shift.