Evidence artifact · rollback trigger matrix

A rollback plan belongs before cutover.

“We can switch it back if something breaks” is not a rollback plan. A usable plan names the source state to preserve, the triggers that stop the cutover, the switching order, the owner, and the evidence that proves recovery.

The matrix below is a synthetic example. Actual triggers and actions are scoped per workflow.

Rollback trigger matrix

Decide in advance what makes “go back” the correct action.

Observed conditionDecisionWay-back actionEvidence after recovery
Blocking parity case failsDo not cut overKeep source as production owner; fix candidateSource still handles accepted traffic
Missing or duplicate business writeStop / rollbackReturn ownership to preserved source pathCounts and affected records reconciled
Critical destination API failure beyond thresholdRollback if threshold is breachedRestore source routing in documented orderExpected source executions resume
Intentional difference is not approvedNo-goKeep candidate inactiveGap remains explicit and unresolved

Minimum rollback packet

Preserved source state

What remains available, what is frozen, and what must not be deleted or downgraded yet.

Ownership map

Which platform owns triggers, webhooks, schedules and writes before, during and after cutover.

Switching order

The exact dependency order for redirecting traffic and restoring the source path.

Recovery checks

The observable facts that prove the source path is safely handling production again.

Reversible cutover sequence

Freeze the accepted candidate

Record the exact n8n version/configuration and unresolved gaps.

Confirm rollback readiness

Source path, trigger ownership, credentials and recovery checks are still available as planned.

Human-approved switch

Production changes happen only after the acceptance evidence is reviewed.

Watch the acceptance window

Use the agreed monitoring signals and rollback triggers, not intuition.

Close the rollback window deliberately

Only after the replacement is accepted and the business chooses to retire the source path.

Related evidence

Know the way back first

Check whether a reversible migration is realistic for your workflow.

The Fit Check is free and comes before paid work or production credential handling.