You need to deploy a change to a system a running production line depends on. How is that different from a normal release?
Downtime has a per-hour cost someone can quote, so changes go in during planned windows under change control, rollback must be instant, and no staging environment reproduces a physical process. Safety functions live in separate assessed systems your software must never join. It also connects availability to the point an interviewer is testing.