Preserve, rehearse, cut over, recover

v1 code, dirty work, database, assets, and service remain intact

restore, export, import, and reconcile disposable copies

one approved window and one owner for every side effect

verified rollback retains both versions and every new record