Rolling deployment

Replacing instances incrementally, controlled by how many extra may exist and how many may be missing at once. It is the default because it needs no spare environment and no traffic switch, and its defining consequence is version coexistence: your database schema, your caches and your APIs must tolerate both versions at once. Rollback is slow, because undoing it is another roll.