Corpus release runbook — ingest, calibrate, activate, gate Diagram

Calibration is fitted against the shadow collection by name, before any traffic sees it
The artifact records content_version; startup refuses a calibration fitted to another index
Cache namespaces include content_version, so the flip needs no cache flush

Eval sets: golden ≥ 200 with ≥ 25% unanswerable; calibration ≥ 30 with ≥ 40 negatives; ≥ 30 cache pairs; splits disjoint
Golden gate: recall@20 ≥ 0.95, MRR@5 ≥ 0.85, faithfulness/relevancy/correctness ≥ 0.90, citation validity 1.0, false answers ≤ 0.05
Bench: --require-target exits non-zero when retrieval P95 ≥ 200 ms