Migration plans you can roll back

A pattern for staged migrations with explicit rollback gates, the telemetry that tells you to stop, and a worked example from a payments cutover.