Production cutovers fit inside a four-hour change window with no room to retry on a failed object.
The 14-phase orchestrator runs in dependency order with automatic retry across passes. Phases commit atomically. Cutover plans run end to end in dry-run mode against staging before they touch production.

