model pinning

Pin the Model, Gate the Upgrade: Catch Agent Drift Before Customers Do

Yes—pin production agents to explicit model IDs. Floating aliases change behavior with no deploy. Upgrade only through a golden-set gate you actually run.