Migration

• Define forward path and rollback path.
• Preserve existing data; make destructive steps explicit and separately authorized.
• Keep mixed-version operation safe where rollout can overlap.
• Sequence expand, migrate, verify, then contract when applicable.
• Make retries idempotent and partial failure observable.
• Verify old and new paths at required transition stages.