Safety

How do you decide between rolling back and rolling forward?

Whether the candidate has a decision rule that survives time pressure, and whether they know what makes rollback unavailable.

The situation behind the question

A release contains four merged pull requests: a UI change, a dependency bump, a new feature behind a flag, and a migration that added a NOT NULL column with a default. Ten minutes after deploy, writes start failing on one endpoint.