Before successful core postcheck: stop and disable the new provider service, restore the four changed existing files, remove three new paths and provider state, restart the previous cached-bootstrap service, and verify backed-up runtime hashes. After successful core postcheck, late publication failure is STOP without automatic rollback.