> what's a relevant incident in this context?

The typical pattern should be to block the promotion but allow the operator to override the block manually. The automated process fails safe (not promoting).