For example, mediawiki-tools-release/make-wmf-branch/config.json shows that CentralNotice is deployed from wmf_deploy rather than master. This is what we want. However, the script normally cuts wmf/* release branches from master each time a release is built, and none of these branches have been created for CentralNotice. This has bad effects, see:
16:53 < RoanKattouw> Quoting from my ops-l email from last week: 16:53 < RoanKattouw> "* CentralNotice doesn't have any origin/wmf/* branches. Instead, it appears to follow the wmf_deploy branch. Why does CentralNotice need a special snowflake deployment branch setup? There are now a bunch of patches in CentralNotice deployed in wmf22 that aren't recorded in any branch, they're just sitting there. However, it seems like wmf23 runs a newer version of the wmf_deploy branch that... 16:53 < RoanKattouw> ...does have these patches. IMO this is a bad strategy, because the actual deployed state of CentralNotice isn't recorded anywhere. If we had lost /srv/mediawiki-staging somehow, we would have been able to rebuild everything correctly from git (+any security patches), but not CentralNotice."