“Every AI-generated change that touches production should run behind a feature flag.”

The vendor's own playbook for progressive delivery of agent changes, complementing the Guarded Rollouts finding already in the inbox. Notable advice: trigger a guardrail violation in non-production first, to prove the rollback works before relying on it. Vendor docs, undated. Used in the Verification Atlas ("Let production judge it, a slice at a time").