state

type DeploymentState struct {
	Workload string `json:"workload"`

	Environment string `json:"environment,omitempty"`

	// Image is the full image reference that is deployed.
	Image string `json:"image"`

	ImageTag string `json:"image_tag"`

	// ManifestDigest is the OCI manifest digest (sha256:...) of the deployed image.
	// This is the canonical drift-detection key — image tags are mutable,
	// digests are not.
	ManifestDigest string `json:"manifest_digest"`

	// GitSHA is the source commit that produced this image.
	GitSHA string `json:"git_sha"`

	// DeployedAt is when this state was committed (after successful health check).
	DeployedAt time.Time `json:"deployed_at"`

	// RollbackFrom is set when this state was restored by a rollback.
	// It contains the digest that failed, for audit purposes.
	RollbackFrom string `json:"rollback_from,omitempty"`
}

type Manager interface {
	LoadDeployed() (DeploymentState, error)
	LoadPrevious() (DeploymentState, error)
	CommitDeployed(s DeploymentState) error
	CommitRollback(s DeploymentState) error
}