RUNBOOK: the deploy steps now verify, before the restart that applies migrations, that Litestream replication is current and its replica restores to the live data, and record the pre-deploy restore point; if not, do not restart. The rollback section restores to that recorded point. ARCHITECTURE: the rotation_check schedule that calls MarkTried is planned (Feature 20); this release ships MarkTried and the rotation review read and decide APIs only. Task: 008c0a8a-2242-429b-a1fd-69346bc1d414 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>