Error Budgets as Delivery Decisions

Why this matters

A service burns its quarterly budget by February, and releases continue because stopping feels like losing. By April the SLO is fiction and the outages arrive weekly; the team then freezes in panic, which is also a decision made without arithmetic. Both halves of the year shared one missing habit: reading the budget before deciding. Budgets do not slow delivery; unbudgeted failure does, all at once, at the worst time.

Concepts

The policy is a table, agreed before it is needed. Budget above half: ship normally. Budget low but positive: ship carefully, risky changes wait or carry explicit approval. Budget exhausted: freeze features, reliability work only, until the budget recovers. The thresholds are numbers in a document, not moods in a meeting; the L52-adjacent habit from M15 (quoting burn) now gates the release train.

Spend deliberately. A risky migration during healthy budget is a budgeted expense: record the expected burn, watch the actual, stop if it exceeds the plan. This makes risk-taking explicit and bounded instead of sneaky and unlimited. Exceptions follow the same shape: who approved, what burn was accepted, what repayment (reliability work, rollback plan) follows. An exception without repayment is just spending someone else's reliability.

Freezes end by arithmetic too. Recovery work ships (fixes, guardrails, capacity), the budget refills with good operation, and releases resume when the number says so, not when patience runs out. The freeze postmortem records what consumed the budget and which guard would have caught it earlier: the next cycle starts better instrumented.

Worked example

A fictional service enters the quarter healthy, burns half on a migration (planned, recorded), then a bad deploy eats the rest. The learner reads the budget at each point and applies the policy: ship, ship-carefully, freeze. The freeze lifts after two reliability wins refill the budget, with the numbers quoted at every transition.

Common wrong move

Freezing by panic after ignoring the budget for months, then unfreezing by impatience before recovery. Both ends bypass the arithmetic and teach the organization that numbers are decoration. Follow the table, both directions.