Three independently versioned artefacts: platform services, connector plugins and aspect schemas. A new source or a new attribute does not need a platform release.
Aspect schema changes must be backward compatible. A breaking change is blocked in the pipeline, not discussed after deployment.
New asset types go to a model change board. The canonical model is the shared contract; letting each team extend it privately recreates the silo.
Gates
Connector conformance tests run against recorded golden payloads, so a source-API change is caught in CI rather than in production ingestion.
Migrations are rehearsed against a production snapshot before they run against production.
Post-deploy smoke harvest covers one asset per source class; projection lag above 60 seconds triggers rollback.
Assumption
Staging holds a subset of production metadata with restricted assets excluded, refreshed weekly. Testing a catalog against synthetic metadata only proves the code compiles.
