Use when collecting dependencies and performing exposed work should restore, isolate, disable, reroute, or partially energize a system under pressure. Defines beneficiaries and threats, staged ownership, partial effects, rollback, visible proof, persistent consequences, recovery, and runtime verification instead of a decorative fuse hunt.
