Known-Good Capture

Known-good snapshots

Preserve the whole working system before risky changes begin. A Qiln capsule captures workflows and app services, models and private assets, dependencies, routes, tests, and rollback metadata as one durable, runnable version. The capsule persists while runtime starts or stops on demand.

  • Workflows + app services
  • Models + private assets
  • Dependencies + routes
  • Tests + rollback metadata
Isolated Editing

Forked branches

Humans and agents make changes in an isolated fork, not production. Each branch begins from a known-good capsule and runs with scoped credentials, no production secret references, and controlled external side effects while the stable route remains on the approved version.

  • Start each candidate from a known-good capsule version.
  • Humans and agents edit the branch only, never production.
  • Use scoped credentials with no production secret references.
  • Control external side effects in the branch.
Diff, Then Test

Capsule diffs + golden tests

Inspect what changed between the known-good capsule and its candidate before running the candidate. Review workflow configuration, models and assets, dependencies, routes, schemas, credential references, and side-effect policy. Then run known inputs against workflow-specific acceptance conditions and preserve the results as release evidence.

  • Compare workflow configuration between capsule versions.
  • Review changed models, assets, dependencies, routes, and schemas.
  • Inspect credential references and side-effect policy.
  • Run known inputs and preserve golden-test evidence.
Controlled Release

Promotion + rollback

Production routes move only after authorized approval. Promotion points the production route alias to the approved capsule version while the prior known-good version remains available. If recovery is needed, rollback moves the route alias back. Completed external side effects are not automatically reversible.

  • Require authorized approval before a production route can move.
  • Point the production route alias at the approved capsule version.
  • Keep the last known-good version available for rollback.
  • Treat completed external side effects as non-reversible.
Questions

Qiln FAQ

A Qiln capsule is the versioned, deployable state around a working production AI workflow system.

It can include workflow definitions, models, assets, scripts, services, dependencies, routes, credential references, tests, side-effect policies, snapshots, and rollback metadata.

A capsule is not just source code, a workflow export, a graph file, a container, or a GPU machine.