Lesson 5.4: Substantial modification and the deployer-to-provider transition - The Security and AI Institute