Safe production rollout validation for retrieval application changes

Before a retrieval change goes live, Hornet checks whether the new version still returns the right documents, ranks them well, and uses acceptable resources, then supports safe rollout or reversal.