H.11.7 Delivery Recovery

Reading progress2 missing
Article in preparation — showing conspect notes

“Rollback” is ambiguous until the state being changed and its side effects are named.

  • Source revert creates a new source state and may require rebuilding; it does not move an existing deployment automatically.
  • Artifact rollback or promotion reversal selects previously built bytes when policy and compatibility still permit them.
  • Deployment rollback changes running state; data, schema, queue, or external side effects may make it unsafe or incomplete.
  • Rollforward and configuration repair can be safer than reverse movement when compatibility or data changed irreversibly.
  • Record authority, blast radius, evidence, destination state, and follow-up cleanup for every recovery action.