# Migration strategy

1. Preserve legacy unchanged and default `LauncherMode=Legacy`.
2. Pilot an isolated group with `NextPilot`, local cache and one P_Rec entry assembly.
3. Validate package/hash/rollback and dry-run launch preparation before any runtime use.
4. Test actual bootstrap only with separate authorization and non-production Plant data.
5. Move to `NextPreferred` only after operational evidence; retain immediate Legacy fallback.

No AppLoader, registry demand-loading or direct UNC deployment decision is implied by this foundation.