The vendor updated the model

A vendor swaps the model under a live GMP-adjacent tool. Who decides, what gets re-tested, and the four working rules that keep you out of trouble.