# Rollback runbook

1. Confirm the incident and freeze further production promotion.
2. Select a known-good immutable image tag or Git revision.
3. Run the protected `rollback.yml` workflow and type `ROLLBACK`.
4. Require the production environment approval.
5. Update the GitOps desired state; do not mutate the cluster manually.
6. Wait for Argo CD reconciliation.
7. Verify rollout, health, metrics, logs and traces.
8. Record the incident, root cause and follow-up action.