Two deploys in one, and the forty-second gap
The new code started serving 40 seconds before the backup finished and 59 seconds before the last migration ran — and the swap that put it there killed every open stream. The rewritten flow migrates first, drains first, proves the new container is serving its own pin, and prints a receipt for each phase. It also found nine index builds that had never been applied.