Nishi Family › Compare › Deployment and Live Hosting
Deployment and Live Hosting — mechanically measured, liar-killed, sovereign.
The sovereign mgmt control plane (upload -> build-on-target -> health-gated promote -> auto-rollback, all simple API calls over own TLS) vs Vercel and Fly.io and Render and Kubernetes with Argo
| Capability | Nishi | Vercel | Fly.io | Render | Kubernetes+Argo | Notes |
|---|---|---|---|---|---|---|
| Health-gated promote with auto-rollback watchdog | Yes | Yes | Yes | Yes | Best | Argo Rollouts is the reference; Fly and Render health-check releases; Nishi /api/deploy stages .new then promotes then an async watchdog verifies health and ROLLS BACK by construction -- never-brick is the default not an option |
| Instant manual rollback | Yes | Best | Yes | Yes | Yes | Vercel instant alias flip to any prior immutable deployment is Best; Nishi POST /api/rollback restores the .prev binary |
| Build on the target from source | Yes | Best | Yes | Yes | Part | Vercel build pipeline is Best-in-class; K8s delegates builds to CI; Nishi POST /api/build compiles with the sovereign toolchain ON the NAS -- no external CI |
| One-command source to live | Yes | Best | Yes | Yes | Part | vercel deploy set the DX bar; Nishi nx_ship packs the tree then uploads over sovereign TLS then builds on target in ONE command |
| Staged content publish (sha-pinned, atomic) | Yes | Yes | Yes | Yes | Yes | Everyone stages then swaps; Nishi /api/promote_content and /api/compare/publish re-hash the stage and install atomically with .prev backing |
| Service supervision with crash-loop backoff | Yes | Yes | Yes | Yes | Best | K8s liveness probes are Best; Nishi hostctl supervise runs live (PID + SERVING probe, HUNG-aware, backoff) and respawns from the promoted binary |
| Live fleet inventory API | Yes | Yes | Yes | Yes | Best | kubectl get is the reference; Nishi GET /api/services serves the multi-service inventory |
| Deploy and ops event stream | Yes | Yes | Yes | Yes | Best | K8s watch API Best; Nishi GET /api/events serves SSE to EventSource clients |
| Ops dashboard UI | Yes | Best | Yes | Yes | Part | Vercel dashboard is Best; Nishi Sovereign Fleet at /health is LIVE behind the operator login with per-service cards and allowlisted actions |
| Fail-closed deploy-target registry | Yes | Yes | Yes | Yes | Best | K8s RBAC-scoped resources are the reference; Nishi allowlists every uploadable and deployable target BY NAME -- unknown targets are refused |
| Machine-readable control-plane spec | Yes | Yes | Yes | Yes | Best | K8s OpenAPI is the reference; Nishi GET /api/openapi.json describes the whole plane for auto-driving agents |
| EXCEED control-plane auth is OPAQUE PAKE | Best | No | No | No | No | Incumbents authenticate deploys with bearer tokens and OIDC; the Nishi plane authenticates with OPAQUE-3DH -- the password never crosses the wire and the server stores no password-equivalent; sessions are Ed25519-minted and TTL-bound |
| EXCEED sovereign end-to-end hosting | Best | No | No | No | No | The live site terminates its own TLS 1.3 and routes SNI without a third-party terminator -- no nginx no cloud LB no CDN vendor; every byte from ClientHello to response is auditable sovereign source on owned hardware |
| EXCEED the control plane deploys ITSELF | Best | No | No | No | No | Proven live: the mgmt API was upgraded THROUGH its own upload-deploy-watchdog chain (DEPLOYED-GREEN) -- self-hosting deployment with never-brick protection; platform vendors upgrade their planes outside your view |
| Canary and progressive traffic shifting | No | Yes | Yes | Yes | Best | Argo Rollouts weighted steps are the reference; Nishi promotes whole-service -- percentage shifting is a named gap |
| Preview environments per change | No | Best | Yes | Yes | Part | Vercel preview-per-PR defined the category; Nishi has no ephemeral preview instances yet |
| Blue-green dual-slot instant switch | No | Yes | Yes | Yes | Yes | Nishi has .prev restore but not two warm slots with instant cutover |
| GitOps declared-state reconciler | No | Part | Part | Part | Best | Argo/Flux reconcile the cluster to a declared repo state; the Nishi registry is imperative API calls today |
| Multi-node and multi-region placement | No | Best | Best | Yes | Best | Fly regions and Vercel edge network lead; Nishi runs one sovereign host plus workstation |
| Autoscale including scale-to-zero | No | Best | Best | Yes | Yes | Serverless platforms scale to zero; Nishi services are always-on supervised processes |
| Secrets manager with rotation | No | Yes | Yes | Yes | Best | K8s secrets plus external-secrets is the reference; Nishi has key files and a vault doctrine but no rotation-managed deploy secrets plane |
| Domain purchase API with spend wall + dry-run-first | Yes | Yes | No | No | No | LIVE-PROVEN to the server pre-flight (Porkbun dryRun, 0 charge): refusal ladder = spec-verified endpoint, creds, literal confirm-spend, quote<=cap; Vercel sells domains via API too -- ours adds the client-side spend wall (their docs not banked, so no exceed claimed) |
| DNS records API on the live registrar (A/TXT) | Yes | Yes | Yes | Part | Part | Live-KAT proven against andelinwest.com over sovereign TLS; platforms manage DNS on their own edges; K8s external-dns is Part |
| TLS certificate acquisition (bundle retrieve + ACME DNS-01) | Yes | Yes | Yes | Yes | Part | LIVE: 10509-byte LE bundle retrieved (0600, key never printed) for andelinwest.com; platforms auto-provision on their edge -- ours lands certs on the sovereign edge |
| Purchase-to-live orchestration (ordered, once-only spend) | Yes | Yes | No | No | No | Gated 8/8: dryrun-then-confirm spend, double-purchase impossible by construction, operator-gated edge step; Vercel buy+auto-cert is the incumbent flow without explicit spend caps |
Generated by nx_swcompare_matrix (sovereign NishiLang organ) from knowledge/compare/deploy.matrix — every Nishi cell verified against real organ source on disk. Zero JS, zero trackers.