Rollback

Rollback is the ability to return to the last good version of your app in minutes, not hours. It is the single most valuable thing you can have on launch day, and the thing most first launches have never tried.

Code rollback is the easy half. Most hosts keep previous deployments and can serve one again with a click. Data is the hard half. A migration that dropped a column, or an agent that deleted rows, is not undone by redeploying code.

Three incidents in the library are pure rollback stories, including an agent wiping production databases and another destroying 2.5 years of data. The test is simple: deploy a trivial change, roll it back, and time how long the app was wrong.

No incident in the library maps to this one yet.