Incident and change management
Use a documented change process for sources, credentials, model policy, tool permissions, workflows and partner bundles. Assess customer impact, test the change, obtain required approval and keep a rollback plan.
For an incident, preserve non-sensitive evidence, identify the affected customer boundary, communicate through the agreed path and record the validated resolution. Do not share customer credentials or unrestricted logs in a support ticket.