Plan, apply and roll back changes to a production ontology, with a blast radius report and a proof an auditor can re-check.