Returning to the last good checkpoint when something shipped turns out broken — the undo button for deployed work, with a logged reason.
Why it matters: confidence to let agents ship comes from cheap reversal. If rollback is easy, you can afford autonomy; if it's hard, every agent action needs a human gate.
Related: Checkpoint