Definition
Critical actions must be undoable or paired with rollback lanes that can be exercised in real operating conditions. The mandate aligns with time-to-restore targets and contestability rights.
If reversal is impossible, systems should add explicit guardrails, higher review thresholds, and public ownership of residual risk.
Adjacent terms
Example corpus
- A benefits eligibility model deployment is blocked unless the team demonstrates a tested rollback path and a 24-hour restoration plan.
References
- Governance taxonomy · Resource
- Worked examples · Essay