Releasing a change to a small share of users first and widening it only if monitoring shows no problems.