The paper introduces local certificates that provide two-sided confidence bands for population-risk increments around a current model. The upper endpoint of this band defines a risk-controlled update rule: updates are accepted only if the certified upper endpoint is nonpositive, otherwise the current model is retained.