DNS CHANGE CHECKLIST
1. Capture current authoritative answers
2. Record TTL and rollback values
3. Lower TTL in advance
4. Publish one logical change
5. Validate authoritative and public resolvers
6. Send controlled authentication tests
7. Monitor reports and errors
8. Restore normal TTL