Gradually promote a new model by routing a small percentage of live traffic to it. Auto-rollback triggers if error rate or latency exceeds thresholds.