All courses / AI Platform and Security / Module 2 / Chapter 7
Learning objectives
After the lesson the participant can:
- List the six promotion gates and say what each checks.
- Compare shadow, canary and champion-challenger deployment by what each measures.
- Explain how LLMOps changes the versioned artefact, the evaluation set, the metric and the promotion unit.
- Draft a predetermined change envelope that separates planned retraining from changes needing a new assessment.
Key concepts
- Promotion gate
- A set of automated checks a model version must pass to move between stages. The book insists on six: data, reproducibility, evaluation, comparison, readiness and approval. Thresholds are read from the decision record so that record and gate cannot disagree.
- Training manifest
- The file stored with the model that pins code by commit, data by immutable version, environment by image digest, configuration including seeds, and hardware class, with a declared reproducibility tolerance.
- ML Test Score
- A rubric of twenty-eight tests in four areas. A test scores half a point when manual and documented and a full point when automated, and the overall score is the minimum across the areas.
- LLMOps
- The lifecycle practice for a general-purpose AI model obtained from a third party: it versions prompt templates, retrieval and guardrail configuration and adapters, and promotes the compound system of model plus prompt plus configuration.
- Predetermined change envelope
- The retraining procedure, thresholds and acceptable ranges of change declared up front under Article 43(4) of the AI Act, so that each retraining within it is a planned change through the gates, with a list of what falls outside.
Interactive exercises
Do them here and get feedback at once. Choose a card and then where it belongs, or drag it.
Interactive exercise 1 · Put in order
From tracked run to retirement
Put the stages of a model version's lifecycle in the order of the chapter's gated pipeline.
Interactive exercise 2 · Match
Strategies and operations of deployment
Match each deployment strategy or lifecycle operation with the chapter's description of it.
Teaching plan
| 10 min | The teacher introduces the hidden technical debts that accrue between training runs and why they make the lifecycle a discipline of its own. |
| 20 min | Walk a version through tracking, registry and the six gates using Nordvik Region's registry entry for claims-ranker 4.0.0; participants identify which fields a pipeline wrote and which a person wrote. |
| 15 min | Cover deployment strategies, rollback as a registry operation, retirement, and the LLMOps table with Hansa Mutual's promotion gate for a compound system. |
| 25 min | Exercise: draft a change envelope and the gate thresholds for one system; groups challenge each other on what belongs outside the envelope. |
| 5 min | Close on the practical consideration: who owns the gates and the registry when the provider trains the model. |
Discussion
- Only the approval gate involves a person. Which of the other five gates is still performed by hand in your organisation, and what would automating it require?
- The release note for claims-ranker 4.0.0 reports a small fall in precision alongside an improvement in parity. Who in your organisation would need such a note, and who writes it today?
- A vendor model update is treated as a change to Hansa Mutual's own system. How do you learn of vendor updates today, and what do they trigger?
Written exercise
Exercise · 25 minutes
Draft a predetermined change envelope
Take a model your organisation retrains or a compound system whose vendor model is updated regularly; if you have none, use Nordvik Region's claims ranker. Write its change envelope: the planned changes with interval, data and parameter ranges, the acceptance criteria with thresholds, the list of changes that fall outside the envelope, and the action those changes trigger. Then write the promotion gate that goes with it: which component versions the candidate names, which thresholds and slices the evaluation uses, what triggers a run, and which role approves, excluding the authors of the change.
Deliverable: A change envelope and a promotion gate definition for one system, each about fifteen lines, with every threshold traceable to a decision record.
Self-test
Choose an answer to see whether it is right, or open the answer below each question.
How is the overall ML Test Score calculated from the four areas?
Show the answer
C. It is the minimum across the four areas
Taking the minimum means that exhaustive data tests cannot compensate for untested monitoring.Why does the chapter call rollback a registry operation, and what does it require?
Show the answer
A. Moving the champion alias back is immediate, provided the previous version's environment, features and dependencies still exist
Rollback works only while previous versions stay deployable, which is why at least two previous champions are kept warm for any high-risk system.In Nordvik Region's change envelope, which of these is listed as outside the envelope?
Show the answer
D. New or removed features, or a change of algorithm family
Adding a feature is the change teams are most tempted to treat as routine; listing it means the pipeline requires a new decision record and assessment.