We need a policy to manage updates to impact services

[ptormene]

This is related also to #11527.
It should be clear who is responsible for the decision to update the impact services, using which models and engine version.