Default to rollback rather than fix-forward

Default to rollback rather than fix-forward

When a deployment triggers an outage, the safest first response is reverting to the last known stable state rather than attempting to fix the problem forward in production. You have a working baseline to return to, and most of the time that will restore service faster...