Tell Customers Before You Change the Model
Swapping the model under your AI product silently is a governance failure. Why model changes are breaking changes and how to notify customers the right way.
Treat swapping the model under your AI product as a breaking change, and tell customers before you ship it. A new model version changes outputs, tone, edge-case behavior, and failure modes, even when the vendor calls it an "improvement." Customers who built workflows on the old behavior deserve a heads-up, a chance to test, and a record of what changed. Silent model swaps are one of the fastest ways to break trust you spent months earning.
Most teams push model changes like a library bump: quietly, in a deploy, with no announcement. Then a customer's carefully tuned prompts start behaving differently, their outputs shift, and they have no idea why. That is not an upgrade. That is an outage they cannot diagnose.
Why a model swap is a breaking change
A model is not a neutral component you can swap for a newer one. It has behavior. Change the version and you change:
- Output format and phrasing, which downstream parsing may depend on.
- Edge-case handling, including cases the customer specifically tuned around.
- Failure modes, so the things that used to break no longer break and new things start.
- Refusal behavior, so a system that used to answer now abstains, or the reverse.
None of that shows up in a version number that says "v2, better." The customer experiences it as their working system suddenly behaving differently. This is closely tied to why every model upgrade erases your capability edge: the model underneath is not stable ground, and treating it as stable is the mistake.
How to notify customers the right way
A good model-change process has four parts.
- Advance notice. Tell customers before the change lands, not after they notice. Say what is changing and when.
- What changed and why. Not marketing. The actual behavioral differences you know about, drawn from your own testing.
- A test window. Give customers a way to run the new model against their real cases before it becomes the default. The ability to test is what turns a scary change into a manageable one.
- A record. Log the change against the same audit trail you keep for the AI system, so any output can be traced to the model version that produced it.
That last point is why logging the exact model version on every AI call matters so much. When a customer asks "did something change," you can answer with a date and a version, not a shrug.
Test the new model before you commit
Do not swap on faith that newer is better. Run the new model against your own benchmark and a real sample of production cases first. This is exactly what your output sampling and quality review process is for: grade the new model the same way you grade the old one, and compare.
Sometimes the "upgrade" is worse for your specific use case. A model that scores higher on public benchmarks can regress on your niche task. You only learn that by testing against your own data before you ship, not after customers complain. Publish the comparison honestly, the way you would any honest AI benchmark, so the change is defensible.
Change management is a governance signal
How you handle model changes tells a buyer whether you understand what you are selling. A vendor who swaps silently is telling you the AI is a black box even to them. A vendor with a change process, a test window, and a version record is telling you they treat the system as something accountable.
That posture is part of what makes governance the moat once capability is a commodity. Anyone can call an API. Managing the change discipline around it, so customers are never surprised, is the harder and more valuable thing.
Across every governed agent I run on Girard AI, a model change is a communicated event with a test window and a logged version, never a silent deploy. The extra step costs a little velocity. It buys the one thing that does not scale back once lost: a customer's trust that their system will not change under them without warning.