Put "I don't know" on the dashboard.
Cursor's new Rollouts bot watches each change as it reaches an environment. It reports one of three states: verified healthy, regression detected, or inconclusive. Before deployment, it writes a monitoring plan that names expected effects, risks, signals, and instrumentation gaps. A person can edit that plan in the pull request.[1]
The useful design choice is not the bot. It is the third state. Missing telemetry, quiet traffic, and a short observation window do not become healthy because no alert fired.
No alarm is an observation. It is not a verdict.
Compare the candidate with what users already have.
Google's Site Reliability Engineering workbook defines a canary as a partial, time-limited deployment plus an evaluation. The changed population is the canary. The unchanged population is the control. The release process needs a way to route a subset of traffic, judge the change, and use that judgment in the rollout.[2]
A dashboard that shows only the candidate loses the comparison. Traffic mix, dependency behavior, and ordinary demand can move both populations. Keep the control on the same panel. Name the revision, environment, population, window, and signals before reading the result.
Separate evidence from permission.
Cursor says Rollouts can open a revert pull request or hand a finding to another agent, depending on configuration. It does not merge or roll back by itself today.[1] That boundary is sound. A health judgment and permission to change production are different records.
GitHub environments make the same separation available in the deployment path. Protection rules can require a reviewer, add a wait timer, restrict branches, or ask an external system for a decision. Environment secrets remain unavailable until required approval is complete.[3]
Write the observation window before the release.
A monitor needs time to see the behavior it claims to judge. The right window depends on traffic, delayed work, cache cycles, and the failure being watched. One fixed number cannot cover every service.
Write the expected effect, control population, signals, minimum observation window, and rollback owner in the pull request. If any field is missing, keep the verdict inconclusive. If the evidence points to harm, stop expansion and hand the exact revision and signal to the rollback owner.