# Deploy slots (stub — later)

Gatekeep’s PR Action does **not** perform production rollback. Ops keeps two slots:

| Slot | Role |
| --- | --- |
| `current` / `active` | What players/users hit now |
| `previous` | Last known-good artifact for one-command swap |

**v1 note only:** wire symlink or compose services outside this Action; record `previous_good_sha` on every deploy; PR template “How to revert” points operators here. Auto-rollback stays human-confirm by default except crash-loop burn-in (see Project rollback design).

Artifact retention for review/verify jobs uses `actions/upload-artifact` (`gatekeep-last-good-<run_id>`, 14 days) — that is **CI evidence**, not the production slot.