Code Orange: Fail Small — Our resilience plan following recent incidents

Cloudflare outlines two late-2025 outages caused by instant, network-wide propagation of faulty configuration changes and introduces **Code Orange: Fail Small**, a company-wide effort to prevent recurrence. The plan adds health-mediated, gated rollouts for configuration (via Quicksilver/HMD), enforces resilient failure modes and safe defaults between services, and revamps break-glass access while eliminating circular dependencies that hinder incident response, with commitments to complete major safeguards by the end of Q1.