$ the-wire · showcase
Runbook failures no longer report as rolled back
By RepoJournal · Filed · About Agent Security · Composed from the cited sources · methodology
A single fix to microsoft/agent-governance-toolkit stops a failed runbook rollback from being recorded as a clean recovery, which changes what your audit trail actually attests to.
fix(agent-sre): report a failed runbook rollback instead of rolled_back (#4478) microsoft/agent-governance-toolkit
RunbookExecutor used to mark an execution ROLLED_BACK whenever any completed step had a rollback action, even if that action raised, and left the rolled-back steps at SUCCESS. It now sets StepStatus.ROLLED_BACK per step whose rollback succeeds and marks the execution ROLLED_BACK only when every rollback succeeded, so failed recoveries surface as failures instead of a clean state in your run his...