The problem
Prompts lived in string literals. A one-word edit shipped with no review and no way back.
How it works
- 01Write
- 02Review diff
- 03Run evals
- 04Staged rollout
- 05Rollback
What was hard
- A prompt change cannot merge until the eval suite passes.
- Every answer in production records the exact prompt version that made it.
The goal
Rolling back a bad prompt becomes a normal deploy.
This is a design I worked out on paper — the problem, the approach and the trade-offs. It is not a shipped product.