PRODUCT · 03
Governed execution.
Once a plan is approved, Changefy executes it — one step at a time, against real systems. Nothing runs that wasn’t in the authorized plan, and every step streams into a visible log.

STEP 1 · IAM
- grant logging.sink.writer to svc-log-forwarder
- role bound — propagation 30s
STEP 2 · DEPLOY
- redeploy log-forwarder sink (rev 118)
- pod log-forwarder-7d9c ready
STEP 3 · RESTART
- restart forwarder process
- process healthy, streaming
STEP 4 · CONFIRM
- awaiting first event in Sentinel
- event received — 42s
