v42
KNOWN GOOD
- Runnable state captured
- Rollback metadata retained
- Runtime starts on demand
Preserve the whole working system before risky changes begin. A Qiln capsule captures workflows and app services, models and private assets, dependencies, routes, tests, and rollback metadata as one durable, runnable version. The capsule persists while runtime starts or stops on demand.
Humans and agents make changes in an isolated fork, not production. Each branch begins from a known-good capsule and runs with scoped credentials, no production secret references, and controlled external side effects while the stable route remains on the approved version.
Inspect what changed between the known-good capsule and its candidate before running the candidate. Review workflow configuration, models and assets, dependencies, routes, schemas, credential references, and side-effect policy. Then run known inputs against workflow-specific acceptance conditions and preserve the results as release evidence.
Production routes move only after authorized approval. Promotion points the production route alias to the approved capsule version while the prior known-good version remains available. If recovery is needed, rollback moves the route alias back. Completed external side effects are not automatically reversible.
A Qiln capsule is the versioned, deployable state around a working production AI workflow system.
It can include workflow definitions, models, assets, scripts, services, dependencies, routes, credential references, tests, side-effect policies, snapshots, and rollback metadata.
A capsule is not just source code, a workflow export, a graph file, a container, or a GPU machine.