A Model Upgrade Is a Release, Not a Setting

A model upgrade is a production release, not a setting. If it can change escalation, refusal behavior, tool posture, latency, or cost, it needs gates, traces, and rollback authority.