system-design · intermediate

Production-Readiness Reviews (PRRs)

Start here

Production is a practical idea you will meet while building and operating software.

Reliability engineering makes availability and latency measurable. Without SLOs, teams argue opinions; with error budgets, they balance speed and safety.

This lesson assumes you are intelligent but new to the topic. Important terms are defined before they are reused as shorthand.

What you will learn

1. Explain Production in plain English.

1. Describe the problem that exists without it.

1. Walk through how it works step by step.

1. Apply a realistic example end to end.

1. Recognize common failure modes and trade-offs.

1. Practice with concrete prompts you can answer in writing.

What you should know first

You can continue even if these are fuzzy—the lesson re-explains what it needs.

Words you need before we begin

Simple story or analogy

A bus service publishes '95% of rides start within 5 minutes.' That is an SLO. The error budget is how often they may miss before they stop adding new routes and fix operations.

Where the analogy stops: software adds concurrency, partial failure, adversarial traffic, and multi-tenant blast radius that physical analogies rarely capture fully. Always re-check the analogy against a real request path.

The problem without this concept

Teams ship features until outages force freezes. Latency averages hide painful tails. Overload without shedding turns slowdowns into total collapse.

Teams that skip this foundation often pay later with outages, slow delivery, or expensive rewrites. Learning Production early is cheaper than learning it during an incident.

Step-by-step explanation

Step 1 — Pick user-centric indicators

SLIs should mirror journeys, not only CPU.

Write the implication down: if you skip this step for Production, what becomes harder tomorrow? That question keeps the lesson grounded in engineering judgment rather than trivia.

Step 2 — Set explicit objectives

SLOs name targets and windows.

Write the implication down: if you skip this step for Production, what becomes harder tomorrow? That question keeps the lesson grounded in engineering judgment rather than trivia.

Step 3 — Derive error budgets

Budget consumes → change process tightness.

Write the implication down: if you skip this step for Production, what becomes harder tomorrow? That question keeps the lesson grounded in engineering judgment rather than trivia.

Step 4 — Watch tails

p95/p99 matter more than averages for UX.

Write the implication down: if you skip this step for Production, what becomes harder tomorrow? That question keeps the lesson grounded in engineering judgment rather than trivia.

Step 5 — Shed load on purpose

Reject or degrade to protect the core.

Write the implication down: if you skip this step for Production, what becomes harder tomorrow? That question keeps the lesson grounded in engineering judgment rather than trivia.

Step 6 — Review readiness for production

PRRs catch missing alerts, runbooks, and capacity.

Write the implication down: if you skip this step for Production, what becomes harder tomorrow? That question keeps the lesson grounded in engineering judgment rather than trivia.

Visual mental model

flowchart LR
P[Problem space] --> C[Production]
C --> B[Benefits]
C --> T[Trade-offs]
C --> F[Failure modes]
B --> O[Operate and measure]
T --> O
F --> O

Learning question: Which box do design reviews most often skip for Production?

Caption: Benefits attract adoption; trade-offs and failure modes keep systems honest.

Complete worked example

Starting situation

Checkout API wants 99.9% success under 300ms at p95 for 28 days.

Constraints

• User-visible correctness matters for core paths.

• The team must be able to operate the design with existing on-call skills.

• Changes should be reversible within a known time window.

Decisions

1. SLI = successful non-5xx checkouts under 300ms / valid attempts

1. Burn alert when budget spends too fast in 1h window

1. Edge rate limit per user + global admission control

1. PRR requires dependency timeouts documented

Execution notes

Implement behind a flag or limited cohort when risk is high. Add metrics before wide exposure. Prefer small steps that validate each decision about Production.

Failure behavior

If the new path misbehaves, disable the flag or roll back the deploy, then inspect which assumption about Production was wrong. Do not stack more complexity until the failure mode is understood.

Outcome

A bad search dependency no longer consumes checkout budget because search is isolated and checkout sheds noncritical extras.

Limitations

This example is intentionally smaller than a full enterprise architecture. Your numbers, compliance needs, and team shape may force different choices—even when Production still applies.

How it works in production

Components and ownership

Someone must own configuration, dashboards, and incident response related to Production. Unowned subsystems become unpageable mysteries.

What good operations look like

• SLO dashboards with burn alerts

• Load tests including saturation behavior

• Load shedding / rate limits at edges

• Capacity plans for peak events

• Production readiness checklists for new services

Data flow and side effects

Trace one user action through the system and mark where Production influences latency, storage, or failure handling. If you cannot mark those points, your mental model is still incomplete.

Metrics, logs, and alerts

• Golden signals: latency, traffic, errors, saturation

• A specific indicator that Production is healthy

• A specific indicator that Production is harming users

Failure modes

Practice naming the failure mode in one sentence during incidents. Precise names speed mitigation.

Trade-offs

There is no universally free lunch. Production is valuable when its benefits exceed its costs for your constraints.

Compare with related concepts

When learning, build a personal concept map. Edges between ideas matter as much as nodes.

Common misunderstandings

1. "99.99% is always the goal"

1. "Error budget means ship broken code freely"

Misunderstandings are sticky because they make work feel simpler. Prefer slightly harder truths that keep users safer.

Check your understanding

What problem does this solve for users or operators, and how will we measure it?

Which logo looks best on a slide?

How do we use it everywhere immediately with no metrics?

How do we turn off all monitoring to go faster?

So the team can detect and mitigate realistic breakage faster

Only to decorate a wiki

Because production never fails

To avoid writing any tests forever

Practice

1. Write one SLI/SLO pair for a product you know.

1. Calculate a rough monthly error budget for 99.9%.

1. List three signals of saturation before total outage.

1. Design a shedding policy that protects login and payment first.

1. Draft five PRR questions for a new microservice.

Deeper notes (still practical)

When you study Production, keep returning to user impact. Every technical choice should answer: who notices, how quickly, and how badly? If you cannot answer, you are collecting machinery without a purpose.

A good learning loop is: read a definition, write a tiny example, break the example, then repair it. Breaking Production on purpose teaches more than rereading happy-path diagrams.

In design reviews, insist on vocabulary alignment. If two engineers use Production to mean different things, the diagram is lying. Write the definition at the top of the design doc.

Production systems combine many ideas at once. Production will sit beside caching, networking, storage, and delivery. Your job is to know which layer owns which failure.

Measure before and after changes involving Production. Anecdotes are weak; percentiles, error rates, and saturation metrics are strong.

Document ownership. Even elegant uses of Production rot when nobody is on call for them. Name a team, a channel, and a runbook link.

Prefer boring defaults first. Novel uses of Production can wait until boring ones are observable and reversible.

Security and privacy cut across topics. Ask how Production handles sensitive data, credentials, and tenancy even if the title sounds purely performance-oriented.

When comparing vendors or frameworks that implement Production, compare failure modes and operability, not only feature checklists.

Teach the next person. If you cannot explain Production without slides full of unexplained acronyms, you do not own it yet.

Revision summary

1. Production exists to solve a concrete class of problems.

1. Learn the problem, mechanism, example, and failure modes together.

1. Measure impact; do not rely on fashion.

1. Operate with ownership, dashboards, and rollback paths.

1. Revisit trade-offs when constraints change.

Glossary

What to learn next

Primary next lesson: continue with related topic sli-slo-error-budgets in this Learning Lab catalog (search the library by that id).

Also consider: observability-and-dora, incident-command, architecture-reviews.

One primary next step beats a pile of equal links. Depth compounds.

FAQ from first-time learners

Is Production only for large companies?

No. Small systems still fail, still deploy, and still confuse users. The scale of machinery may differ, but the questions—correctness, latency, ownership—appear early.

How do I know I understand it?

You can explain it without slides, give a minimal example, name two failure modes, and describe one metric. If any of those are missing, keep practicing.

What should I ignore at first?

Vendor trivia, premature micro-optimizations, and debates that do not change user outcomes. Return to advanced variants after the core loop is solid.

How does this connect to interviews?

Interviewers probe judgment. Discussing Production with trade-offs and failures scores higher than reciting definitions. Use the worked example structure in whiteboard answers.

Track: Reliability and Operations

Previous: CI/CD & Developer Experience

Series: Reliability & SRE Practice

1. Availability — Nines, Error Budgets, and Redundancy
2. SLIs, SLOs, and Error Budgets — Measure Reliability Like a Product
3. Capacity Planning for Backend Services
4. Tail Latency and Load Shedding — Surviving Peak Traffic Overload
5. Production-Readiness Reviews (PRRs) (this guide)
6. Incident Command for Backend Teams

All series

By Shubham Jain

All articles · Study paths

Shubham Jain · Learning Lab