Our upgrade documentation does not provide clear guidance on what a safe coder upgrade looks like. We do not inherently advertise or support rolling/live upgrades, they currently work if the administrator coincidentally upgrades at a time when no users are active.

We should provide best practices on upgrading a production deployment