Swap the Model. Keep the ATO.
Frontier models version monthly; accreditation does not. Fuse the agent's identity to a model name and every release forces a significance question you cannot answer cheaply. Abstract the model behind a stable identity and a swap becomes a change request with a regression gate.