Rollback must never erase a right we already acknowledged.
Key is now authoritative. Runtime rollback may change application pointers, configuration or routing, but an older data snapshot must never be restored over acknowledged customer changes and Core is not an automatic fallback writer.