FIELD NOTE / X
Undo is not time travel.
The short film, the complete written thought, and the evidence behind it.
The X conversation link will follow its public release.
Undo is not time travel.
Video caption
Undo is not time travel. It may override a legitimate concurrent change. Bind counter-actions to current state and authority. #EricFieldNotes
Full written post / accessibility read
The placement move is only half complete. Before recovery, the customer scales the service. A blind move-back now targets a world that no longer matches the original preconditions.
A compensating action is another business action with its own authorization, state checks and possible failure. Restoring a remembered old value could discard the customer's new capacity decision.
Compare the current placement version, customer scale request and route state. If an inverse still satisfies policy, record its separate operation identity. Otherwise pause for the named operator.
Require fresh preconditions and a separately auditable counter-action before undoing a side effect. Do that because a correct inverse for yesterday can be the wrong customer action today.
#EricFieldNotes
Four-beat scene transcript
1. Undo is not time travel.
The placement move is only half complete. Before recovery, the customer scales the service. A blind move-back now targets a world that no longer matches the original preconditions.
Visual: A customer may change the service after the original move.
2. The inverse can cause new harm.
A compensating action is another business action with its own authorization, state checks and possible failure. Restoring a remembered old value could discard the customer's new capacity decision.
Visual: It may override a legitimate concurrent change.
3. Validate current policy first.
Compare the current placement version, customer scale request and route state. If an inverse still satisfies policy, record its separate operation identity. Otherwise pause for the named operator.
Visual: Choose forward repair, compensation or an owner route.
4. Compensate against now.
Require fresh preconditions and a separately auditable counter-action before undoing a side effect. Do that because a correct inverse for yesterday can be the wrong customer action today.
Visual: Bind counter-actions to current state and authority.
Research and claim limits
The examples identified as illustrative or simulated are design probes, not reported incidents. Vendor specifications do not establish workload performance.