governance and compliance

Practical, Bash-first checklist for deploying AI services on Linux: run a preflight host script, containerize a minimal FastAPI model server with Podman, enforce secure defaults (non-root, read-only FS, firewalls, resource limits), add observability via systemd + nginx, and roll out safely with canary and rollback. Paste-ready commands, SLO checks, and tips to make deploys boring and reliable.