Review and control a reversible response
Inspect evidence, scope, health checks, time limits and rollback before keeping or reversing an action.
Expected result
A narrow action is approved or rolled back with a complete audit trail.
Before deciding
Confirm the affected service, evidence confidence, exact route or fingerprint, expected business impact and maximum TTL.
Actions begin in observation, pass replay and canary checks, and remain temporary unless evidence supports promotion.
High-impact operations require a separate approval and a recent identity confirmation.
Verification
- Required health checks pass
- The mitigation lease is current
- The case timeline records the decision