You talked about a rollback that didn’t actually restore the system. How did CI/CD allow that?

A rollback appeared successful but failed because the database schema had already migrated forward, making old application code unable to read the new schema. The fix was implementing bidirectional schema migrations with both forward and backward paths, enabling true rollback capability in CI/CD pipelines.