Design the rollback you don't have yet

The prompt

For your riskiest recent deployment, describe the retry, timeout, circuit-breaker, idempotency, dead-letter, and rollback behavior that actually exists today. Design the one that's missing.

Why it's built that way

Retries, timeouts, circuit breakers, idempotency, dead-letter handling, and rollback need to be designed independently of the model — non-deterministic reasoning should sit inside deterministic operational boundaries, not depend on the agent behaving well.

What to do with the answer

Test the rollback path you designed against a real (non-production) failure before you trust it.