EssaysProduction LessonsWhy Rollbacks FailWhy Rollbacks Fail: The Gap Between "Reversible" and "Safe"