Have a CI/CD pipeline that does the following:

- unit tests each service

- all services fan-in to a job that builds a giant tar file of source/code artefacts. This includes a metadata file that lists service versions or commit hashes

- this "candidate release" is deployed to a staging environment for automated system/acceptance testing

- it is then optionally deployed to prod once the acceptance tests have passed