Before successful postcheck, stop and disable the new service, restore four existing files, remove three new paths and state, restart the previous bootstrap service, and verify runtime hashes. After successful postcheck, late publication failure does not roll back verified core changes.