Build a generic change-management system for patching workflows, AI reports, and suppression controls—ensuring patches must be reviewed/approved before release