Rolling Out LLM Changes Without Breaking Users

Model upgrades, prompt changes, new features — every rollout can break the things you already shipped. Shadow traffic, canaries, A/B tests, and the prompt migration nobody tells you about.