One eval, every candidate
Run the same test set against the base, the prompted base, and the tuned model. Publishing the three numbers is what makes the choice defensible to anyone reading the deploy.
Revert must be instant
The previous model stays loaded or one step away. A tuned model that turns out bad has to be swapped in minutes, and a rebuild is not minutes.