A public-health team promotes prompt templates and agent stacks through CI/CD and must catch security issues before production. Which practice best fits that GenAI delivery pipeline?
Select an answer to reveal the explanation.
Short Explanation
Promoting a new public-health agent should feel like a vaccine lot release—scanned, staged, and reversible—not like hot-editing the fridge labels in production. CodePipeline plus security scans keeps that discipline.
Full Explanation
CI/CD for public-health GenAI should promote prompt templates and agent stacks through AWS CodePipeline or an equivalent gated pipeline that runs automated security scans and provides a tested rollback path before production. Civic GenAI changes are high impact: a bad prompt can leak guidance, alter clinical triage tone, or break tool permissions. Pipeline gates catch dependency, infrastructure, and configuration issues early, and rollback lets operators restore the last known-good agent pack when a promotion misbehaves. Editing production prompt templates directly in the console with no pipeline or review fails change control and makes incidents hard to reproduce or reverse. Shipping agent stacks by copying ZIP files over RDP to the production bastion fails automation, integrity verification, and auditable promotion history. Disabling rollback so failed promotions stay in place for forensic curiosity fails service recovery—forensics can use artifacts and logs without leaving residents on a broken agent. Exam caveat: non-deterministic model outputs do not excuse skipping pipeline tests; test contracts, schemas, safety filters, and evaluation suites even when exact strings vary. Security scans should cover IaC, dependencies, and secret leakage in prompt packs—not only container CVEs. Operational check: Require pull-request review for prompt and agent changes; run SAST/secret and infrastructure scans in the pipeline; execute evaluation suites on a fixed civic prompt set; verify one-click or scripted rollback to the prior version; and record who promoted what for public-health audit.