E-004 · governanceprovenexercised every promotion
Every promotion carries a reversible handle
No mutation enters production without a verified, exercised reverse path that restores signed state.
100.0% reversible promotions
Method
Rollback is exercised in shadow at promotion time. Promotion blocks if the reverse path fails to restore signed state and lineage parity.
Supporting metrics
- promotions tested
- 8,914
- ungoverned shipments
- 0
- rollback p95
- 1.4s
What is not yet proven
Open: rollback under partial-region failure is exercised in simulation only.
Ledger pointer
$ ledger://rollback/shadow-runs
Shareable URL
https://prodia.dev/evidence/rollback