change-risk-rollback
Skill4 starsChanged 10 months agoMITView on GitHub
Use when planning release, deployment, or infrastructure changes. Produces risk assessment with failure modes, impact rating, rollback procedures, and prerequisite execution criteria before deployment.
In this repository67 other files it gives its agents.
- AGENTS.mdAGENTS.md
- CLAUDE.mdCLAUDE.md
- agents-onboardingSkill
- agent-workitem-automationSkill
- architecture-testingSkill
- aspire-integration-testingSkill
- automated-standards-enforcementSkill
- best-practice-introductionSkill
- branching-strategy-and-conventionsSkill
- broken-windowSkill
- ci-cd-conformanceSkill
- component-boundary-ownershipSkill
- contract-consistency-validationSkill
- csharp-best-practicesSkill
- deployment-provenanceSkill
- documentation-as-codeSkill
- documentation-scaffoldSkill
- dotnet-bespoke-code-minimisationSkill
- dotnet-best-practicesSkill
- dotnet-domain-primitivesSkill
- dotnet-efcore-practicesSkill
- dotnet-healthchecksSkill
- dotnet-logging-serilogSkill
- dotnet-mapping-standardSkill
- dotnet-open-source-first-governanceSkill
- dotnet-source-generation-firstSkill
- dotnet-specification-patternSkill
- dotnet-testing-assertionsSkill
- environment-traceabilitySkill
- finishing-a-development-branch-iddSkill
- greenfield-baselineSkill
- impacted-scope-enforcementSkill
- incremental-change-impactSkill
- incremental-deploymentSkill
- innersource-governance-bootstrapSkill
- issue-driven-deliverySkill
- library-extraction-stabilisationSkill
- local-dev-experienceSkill
- markdown-authorSkill
- modern-csharp-coding-standardsSkill
- monorepo-orchestration-setupSkill
- observability-logging-baselineSkill
- pair-programmingSkill
- persona-switchingSkill
- process-skill-routerSkill
- quality-gate-enforcementSkill
- release-tagging-planSkill
- repo-best-practices-bootstrapSkill
- repository-foundation-bootstrapSkill
- requirements-gatheringSkill
- runtime-tooling-validationSkill
- safe-brownfield-refactorSkill
- scoped-colocationSkill
- security-processesSkill
- selective-build-testSkill
- semantic-version-impactSkill
- session-awareSkill
- skills-first-workflowSkill
- static-analysis-securitySkill
- structured-review-workflowSkill
- The first 60 shown.
The file
Files
Change Risk & Rollback
Overview
Produce explicit risk and rollback analysis before deployment. Enumerate failure modes, assess impact, define rollback procedures, and establish Go/No-Go criteria.
REQUIRED: superpowers:verification-before-completion, superpowers:systematic-debugging
When to Use
- Planning release or deployment changes
- Requesting assessment of operational risk
- Discussing rollback procedures
- Planning infrastructure or configuration changes
- Preparing production deployment
Core Workflow
- Identify change scope (component, dependencies, traffic, window)
- Enumerate failure modes (minimum 3 with symptom, detection, impact, probability)
- Rate each risk (impact x probability)
- Define rollback procedure (detection, Go/No-Go criteria, execution steps, timeline)
- List prerequisites (backups, monitoring, on-call, previous version)
- Select deployment strategy (Blue-Green, Canary, Rolling, Big-Bang)
- Define success criteria (measurable, time-bound)
See references/failure-modes.md, references/rollback-templates.md,
and references/deployment-strategies.md for details.
Quick Reference
| Risk Level | Impact x Probability | Action Required |
| Critical | HIGH x HIGH | Executive approval, full plan |
| High | HIGH x MED | Full rollback plan required |
| Medium | MED x MED | Standard rollback procedures |
| Low | LOW x LOW | Minimal documentation |
Red Flags - STOP
- "Deployment is straightforward"
- "Can roll back if needed"
- "No time for risk analysis"
- "Testing caught everything"
- "We'll figure it out if something breaks"
All mean: Apply skill before deployment or document explicit risk acceptance.
Rationalizations Table
| Excuse | Reality |
| "Deployment is simple" | No deployment is risk-free. Even simple changes have unexpected impacts. |
| "Can roll back if needed" | Rollback must be defined BEFORE deployment, not during incident. |
| "No time for risk analysis" | 15 minutes of analysis prevents hours of incident response. |
| "Tested in staging" | Staging doesn't replicate production. Risk analysis still required. |
| "Too much work to back out" | Sunk cost fallacy. Better to delay than rush and fail. |
Evidence Checklist
- Change scope documented (component, dependencies, traffic)
- Minimum 3 failure modes identified with detection criteria
- Risk rating for each failure mode
- Rollback procedure with timeline
- Go/No-Go criteria explicit and measurable
- Prerequisites checklist provided
- Deployment strategy selected with rationale
- Success criteria defined
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
No reviews yet
People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.
- It worked
- Partly
- It didn't
Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

