modelpromote

Govern the switch when you change the AI model in production: evaluate against a locked policy, require a named human approval, activate with read-back confirmation, verify from telemetry, and roll back to a target that cannot be redirected. Zero runtime