This is similar to how we handle protobuf, avro and json. Each service has their our own metadata store that contains that services registered schemas. In a predeploy job we check those schemas against confluents schema registry for breaking changes. If there are changes the service doesn't get deployed.