# RB101 AI agent rollback worksheet

Use one record to contain the incident, freeze the active and target manifests, bound affected work, reconcile authoritative effects, validate recovery and control reopening.

## Twelve recovery record groups

1. Incident identity, severity and commander
2. Detection signal, start time and frozen timeline
3. Active AM18 complete manifest
4. Known-good KG17 complete manifest
5. Rollback, forward-fix, failover and containment decision
6. Affected users, runs, operations, queues and systems
7. Kill, degrade, queue, quarantine and credential controls
8. Target identity, availability, compatibility and history
9. Restoration sequence and midway-failure plan
10. Operation-state and effect reconciliation
11. Compensation authority and verification
12. Isolated tests, stage cohorts, stop rules and closure

## State rule

Use DECLARED → CONTAINED → TARGET_VERIFIED → RESTORED → EFFECTS_RECONCILED → VALIDATED → STAGED → RECOVERED only when exact evidence exists. Preserve RESTRICTED, UNKNOWN, FAILED, PARTIAL and SPECIALIST_HOLD. Never convert timeout to failure or allow an aggregate score to override a permission, privacy, tenant-isolation, credential, financial-state or duplicate-effect blocker.