Pick a default Git model by team size × release cadence, then lock main with PR template + branch protection—hotfix/release sequences included.