## Model Change Verification

- **Live service verification replaces dedicated benching** — A model change is verified by driving the live service (boot ledger, per-request `timings`/`Server-Timing`, one real request per harness role) rather than running a separate benchmarking window. Deliberate bench windows (flag A/Bs, shape sweeps) are separate operations on a live host and require stopping the production service first.