advanced

Error budget

Use allowed unreliability to balance feature velocity, operational risk, and reliability investment.

Error budget is the allowed unreliability implied by an SLO. If availability SLO is 99.9% monthly, budget is ~43 minutes of bad events per month. Teams spend budget on launches, experiments, and accepted risk—or stop shipping when budget is exhausted.

					remaining budget = allowed bad events - actual bad events
				

| Budget state | Typical response | |--------------|------------------| | Healthy | Ship features, tolerate some risk | | Burning fast | Freeze risky changes, fix reliability | | Exhausted | Reliability work only until recovery |

Product and engineering share the budget conversation—it is not only ops. Burn-rate alerts give early warning before users notice SLA risk.

On interviews: balancing feature freeze vs innovation, partial outages consuming budget, and multi-service budgets.

Common pitfalls: SLO without enforcement; ignoring budget during crunch; measuring budget on the wrong SLI.

The trade-off is speed of delivery versus protecting user trust during change.

Checklist:

  • Compute budget from explicit SLO.
  • Track burn visually for teams.
  • Define policy when budget is low.
  • Tie postmortems to budget impact.