How do you gate risky changes to backend systems so you can learn in production without causing a major incident? What is one rollout practice that gave you clear signal early enough to act?