When a deployment goes wrong, recovery is improvised. Engineers reconstruct the previous state from memory and backups while the outage clock runs.
"The deployment failed at 2am and it took us four hours to get back to where we were at midnight — why isn't 'undo' a button?"
Recovery time after failed change
Change-related downtime
To first protected deployment