3. Bind the recommendation to configuration, effectivity, and evidence

Using SYSE.13, the configuration Agent identifies candidate configuration AS-7.5-rc2 and its proposed effectivity: tenant cohort TenantCohort-Canary, 5% of eligible traffic, regions EU-West and EU-Central, for seven days. Using SYSE.4, the assurance Agent qualifies the partition replay only for the four claims and conditions shown above. It does not support wide release, other regions, a different token lifetime, or a different threat model.

The release-preparation Agent uses SYSE.14 with the architecture decision, configuration account, replay result, AuthenticationThreatModelResult-TM4, and rollback evidence. The Work returns this recommendation: prepare alternative A as AS-7.5-rc2 for the stated 5% canary; retain AS-7.4 as the rollback configuration; do not widen effectivity until the release Agent receives the canary observations and the required security permission. The recommendation is not the release occurrence and grants no authority.