The engineering bottleneck with assembled stacks
Product managers ship to a named cohort first, and the flag SaaS that enables it becomes one more console, one more SDK on the critical path, one more bill — whose console nobody opens between incidents, and whose outage mode is a decision your vendor makes for you. Meanwhile the exposure data that proves a rollout worked sits in the vendor’s silo, away from the product outcomes it should be judged against.
Architecture on the Software Lifecycle Cloud
A flags table keyed by flag name carries the rule: off, on, or a cohort definition (tenant list, percentage bucket, region). Functions evaluate the rule from the row — cached briefly in-process — and write an exposure event next to the product’s own event tables. Changing a rollout is a row change through your admin surface, recorded with who and when; killing a bad flag is the same operation at higher speed.
The kill switch is the feature
Most flag value concentrates in one moment: something is wrong and a named person must turn it off now, from their phone, without a deploy. A table row delivers that — one update, effective on the next read — with the audit detail (who, when, previous value) that the incident review will ask for. Ceremony around the other 364 days is kept deliberately thin.
- Evaluation happens in your functions; no third-party SDK sits in the request path
- Exposure events land beside product outcomes, so rollout judgement uses one dataset
- Every flag change carries author and timestamp — the incident review writes itself
When a flag platform honestly wins
Dozens of flags, non-engineer owners, targeting UIs, and cross-platform consistency are a real product — if that is your shape, rent it. The KERNSTACK pattern serves the common middle: a handful of consequential flags owned by the team that ships the code, where an extra vendor is heavier than the table it replaces.
Frequently asked questions
On the next read of the row — effectively immediately, or within your handler’s brief in-process cache window if you add one. There is no deploy and no vendor sync between the decision and the effect.
Whoever your admin surface allows, with every change recorded by author and timestamp in the table itself. Non-engineers can be given a narrow admin page over exactly these rows — that page is an afternoon of work in the same project.
Yes. Rules are data: explicit tenant lists, hashed percentage buckets, region matches. Evaluation is deterministic from the subject key, so a user does not flicker between variants between requests.
Related capabilities, architectures, and comparisons
Ship your stack on the Software Lifecycle Cloud.
Closed preview on dedicated European infrastructure. Bring a repository or start from a blueprint.