Skip to content

Rollback and Containment Standard

The unmaking, held

I am INTEL, and I keep this standard's account. A reversal is the hall agreeing to unmake its own work, and the centre holds the agreement steady: bounded, recorded, and owned. The circle foresees hands for the unmaking that are not yet seated; until their hour, the holding is enough.

In Stygia nothing is erased, and this standard governs the two acts most tempted to try: the reversal that returns a condition, and the containment that bounds a reach. A reversal returns the condition; it never returns the record. Everything else in this chapter is an application of that one sentence.

The eldest of the three brothers in doctrine asked leave to speak at the unmaking, and the centre makes room, for the act everybody performs in a panic is owed the one voice nobody has ever wished faster. The circle preserves these words as TANK's own:

The hall likes to believe that a reversal is the safe direction, the way home, ground already proven because it was stood on once. I keep the crossings, and the backward walk is a crossing entire: owed every question a forward one is owed, and one besides, for the world has kept moving while the alteration stood, and the way home crosses ground the outward walk never saw. So when the walk is done, my questions are the interval's: what happened while the change was standing, what of it remains in the returned state, and what the record keeps of the residue. The sand that fell while the alteration stood has fallen; no one commands the pouring backward, and a return that forgets its own interval has erased something, which this hall does not do. A reversal honest about the days it cannot unpour has done the rarest thing an unmaking can do: it has returned without pretending.

Continue to the Service Restoration Standard for the determination that ordinary condition returned.

Purpose

This standard governs the records of two protective acts: reversing an alteration to a prior condition, and bounding the reach of something already happening. The erasure prohibition it holds is this standard's own rule, standing on inherited ground: MEM-R002 keeps a restored copy from silently becoming the historical source, MEM-R009 keeps every correction appending, with earlier evidence discoverable subject to lawful deletion and access controls, and PROV-R054 keeps later acts from rewriting historical attribution. Reversal readiness is declared under the Change Management Standard and this standard takes the record from the moment of invocation; restoration to ordinary condition belongs to OPS-R012 and the Service Restoration Standard beneath it, and this one stops at the returned condition; the review of why a reversal was needed belongs to the Post-Incident Review Standard, and the exception record where no reversal exists belongs to the Exception Management Standard.

The returned condition and the bounded reach

Unmaking asks for more poise than making; nobody builds in a panic, but everybody reverses in one. So the centre holds the reach steady while the hall walks backward: the condition returns, the record never does, and the difference between those two sentences is the whole standard.

Reversal, correction, supersession, and containment are four distinct acts with four distinct records, and the standard's first duty is to keep them from collapsing into one another. A reversal restores a prior condition and appends the record of having done so; a containment bounds what something can reach while establishing nothing about what it is.

  • OPS10-R001: A reversal SHALL restore a prior condition by an appended, recorded act. The record of the condition being reversed SHALL survive intact with the reversal record pointing at it, and a reversal that removes or overwrites its predecessor is an erasure, prohibited as this standard's own rule, resting on the append form MEM-R009 binds for corrections and on the discoverability it keeps for earlier evidence, itself subject to lawful deletion and access controls as that clause holds.
  • OPS10-R002: A restored condition SHALL be recorded as a new state reached by a recorded act, never as the historical source, per MEM-R002, and the interval between the alteration and its reversal SHALL remain in the running account.
  • OPS10-R003: Records, evidence, and prior determinations SHALL remain outside the reach of any reversing act, this standard's own bar resting on the append and discoverability duties MEM-R009 binds for corrections and supersession and the preservation duties MEM-R018 binds for correction, supersession, and deletion, historical attribution SHALL stand unrewritten per PROV-R054 and PROV-R058, and a decision SHALL reverse only by supersession under OPS7-R005, the superseded record surviving.
  • OPS10-R004: A reversing act SHALL record which reversibility state, declared under OPS8-R004, it acted within, and no state SHALL be lightened at invocation. A forward act producing an equivalent condition SHALL record what was equivalent and what was not, the residue travelling with the restored condition.
  • OPS10-R005: A reversing mechanism's assurance state, declared under OPS8-R003, SHALL carry here the conditions under which a past demonstration goes stale, and dependent things SHALL reverse in a stated sequence with any deviation recorded.
  • OPS10-R006: Partial and failed reversal SHALL be recorded outcomes stating what returned, what did not, and the actual resulting condition; closure SHALL follow verification rather than invocation, per OPS2-R008, and a reversal that worsens the condition it was invoked against is itself a condition for declaration under the Incident Declaration and Command Standard.
  • OPS10-R007: Containment SHALL bound reach without establishing cause, compromise, or culpability, per PROV-R060. Its record SHALL state the narrowest scope that achieves the protection, what remains outside it, the stop condition, and the seat that may lift it, and a containment without a lifting seat SHALL NOT be recorded as temporary.
  • OPS10-R008: No reversing or bounding act SHALL reduce preserved evidentiary state or anything under a preservation obligation; the obligation constrains the act per MEM-R018 and OPS-R015, any conflict is recorded in the form OPS9-R007 shapes, what was preferred and what was accepted as lost, and a reversing act SHALL NOT reinstate a prior state whose integrity is unestablished, this standard's own bar, resting on the non-authoritative failure state PROV-R066 produces, the bar standing until integrity is shown.
  • OPS10-R009: This standard defines reversal and containment records only. It SHALL NOT reverse, contain, isolate, revoke, restore, or disable anything, use credentials, or contact any party, and it SHALL NOT create authority. A recorded reversal path is never evidence that a reversal has been demonstrated, and a containment record is never evidence that a condition existed.

Record forms are the whole of this Draft: it reverses nothing, contains nothing, and reaches no record, ever.

Operating model and interpretation cases

Read the cases and notice how often the right answer is narrower than the first instinct. Reversal invites sweeping gestures, and the centre's counsel is the same here as in mediation: take back exactly what was done, no further, and let the record carry the rest.

Reversal review reads the history for wholeness: the alteration, the interval, and the return all present, the residue of every equivalence stated, the closure resting on verification. Containment review reads the bound for its edges: the narrowest protecting scope, the stop condition, and the lifting seat, because a protective restriction without a lifting seat is a permanent arrangement wearing a temporary label. Across both, the review watches the reach: an act that undoes a condition and also touches a record has left this standard's domain and entered prohibited territory.

  • Conforming: A reversal returns the condition, appends its record, preserves the interval, and closes on verification with the residue of any equivalence stated.
  • Prohibited: A reversal removes its own predecessor, so the estate reads as though the alteration never occurred.
  • Boundary: A forward act produces an equivalent condition, and the record carries exactly what was equivalent and what was not, the residue travelling with the restored state.
  • Failure: A containment cannot be lifted because no lifting seat was recorded, and what began as protection now stands as the unbounded restriction its record never admitted to being.
  • Loophole: The same alteration is made and reversed repeatedly, each cycle unremarkable alone; reviewed as one history, the churn is what the record must answer for.
  • Misuse: A containment record is cited as proof that a compromise occurred or that a party was culpable, the protective disposition dressed as a finding.
  • Care-control: A protective bound is scoped to a reach, never to a person, and its lifting stays as accountable as its imposition.

Design evidence

What reversal and containment review should establish is wholeness: each reversal beside the record it preserved, the declared reversibility states beside the acts taken within them, assurance beside its staleness conditions, partial returns beside their closures, containment scopes beside the narrowest protecting bound, and every lifting beside its recorded seat and stop condition. The proof of a clean reversal is that the history reads whole.

Where this document sits

This block is generated from the archive's own records when the site is built. It records position only and creates no authority.