We phased traffic: 5% → 25% → 60% → 100% to de-risk. Design the rollout so rollback takes minutes, not hours. We learned this the hard way during a vendor swap.