Rollback and recovery

Every deployment preserves the previous known working configuration for each target. This makes rollback agent-aware: successful targets can remain on the approved version while a failed target returns to its own prior working version, subject to the deployment policy.

Automatic rollback

When apply, acknowledgement, or health checks fail, FleetAMP marks the target failed, sends its prior snapshot, verifies the reported effective version, and records an event such as Deployment failed; reverted to version v12.

Manual rollback

Administrators can select a previously successful immutable version and start a governed rollback. FleetAMP records the initiator, reason, target snapshot, source and destination versions, and outcome.

Rollback does not delete the failed version or approval record. Both remain available for comparison and audit.