Target
Digest and owner are fixed before admission.
OPERATOR CONTROL
Rollback is selected before execution begins.
The authorization binds one rollback target. Failure before commit preserves the prior owner; failure after commit requires exact rollback or an explicit blocked state.
LOCAL CONTROLJudgment state: NONE
Non-resurrection is part of rollback
Rollback may restore application structure, but reconciliation must prevent expired, revoked, corrected, superseded, deleted, or tombstoned targets from becoming current again.
Receipt
Start, result, completion, limitation, and invalidation targets are content-free.
No silent split
Route ownership cannot remain split between candidate and prior owner.
EVIDENCE BOUNDARY
Local mechanism, explicit authorization, operational execution, and participant standing remain separate.
Implemented locally
Rollback state machine, candidate-receipt invalidation, prior-owner preservation, and non-resurrection requirements.
Not supplied or verified
An authorized database restore, route activation rollback, host rollback, or production result.
Exact current condition
LOCAL_CONTENT_FREE_CONTROL_IMPLEMENTED
No participant judgment
Cancellation, refusal, expiry, rollback, correction, and blocked evidence have participant-evaluation and standing effects NONE.
NO JUDGMENT WHATSOEVER. A technical state is not a moral condition.