- Failure
- A bounded workflow stopped before its success criterion was verified.
- Rollback
- Reversible side effects are inventoried and restored through approved steps.
- Human action
- Review residual risk and decide whether authority may be restored.
- Evidence
- Incident identity, step receipts and monitored resolution evidence.
platform · AVC
Failure is part of the operating model.
Side effects, rollback, operator action and recovery evidence remain explicit.
Detect → contain → recover → verify.
Every transition is event-backed and operator-visible.
- 01Detectcomplete
Correlate failure and health events into an incident identity.
- 02Containactive
Bound retries, inventory side effects and open circuits when needed.
- 03Recoverqueued
Run approved mitigation or rollback steps with receipts.
- 04Verifyqueued
Monitor restored behavior and attach resolution evidence.
Recovery plan
Mitigation steps emit their own evidence.
A recovery plan records what failed, which side effects occurred, what was retried or rolled back and which owner action remains.
Completion
Recovery requires proof, not an agent claim.
Resolved state follows mitigation evidence and monitoring. A cheerful completion message is not, regrettably, a control system.