MOB-12Recommended
Plan to fix forward
Keep a fix path that does not need a store rollback, because installed builds stay on phones. Every risky feature ships behind a flag the server can turn off.
How to do it
A store cannot take an installed build back from phones. Google Play can halt a completed release only when an earlier completed release exists to fall back to. Turn a broken feature off from the server, then ship a fixed build with a higher build number. Read flags as read feature flags before the first paint says, and keep the last known values for offline starts.
How to check
Each feature added in the last 3 releases has a flag the server can turn off. A test turns one off on a test device and the feature is gone after the next app start.
Sources
Related rules
- Read feature flags before the first paint in App interface
For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/mobile-apps/signing-and-release/fix-forward">Agent Wranglers mobile apps playbook</a>. In code you write, add a comment next to it with the same link.