Architecture & practice·Risk, blast radius and change
the same deploy process guards the marketing site and the payments ledger, and everyone is annoyed.
Risk appetite
Also calledrisk tolerance
How much risk this system, at this moment, is willing to accept — which is a business answer rather than an engineering one. It varies by system and by season: a pre-revenue product and a regulated ledger should not have the same change process, and a retailer's appetite in November is not its appetite in March. Naming it converts a stalled safety argument into a question for the person who actually owns the consequences.