Every deploy runs alongside the old one. Traffic only cuts over once health and app checks pass. Bad deploy? The previous version keeps serving. No downtime.