Model Substitution at Deployment

When an organization's model passes full validation and enters an automated deployment pipeline, with no re-verification after deployment; due to unmitigated control gaps, an attacker substitutes the model at the final stage, so the running version differs from the validated one while all records show a successful deployment, triggering compliance exposure and operational reputational costs.