Rollback Is a Controlled Decision

PatchPilot does not treat rollback as a panic button. Rollback is executed only when validated health signals cross policy-defined thresholds.

• No rollback without verified recovery state
• No rollback without attribution
• No rollback without audit trail