# Recovery / rollback

This STEP changes no persistent source, configuration, or database schema.

The only runtime actions are:
1. targeted restart of VM100 router-wgpay-egress-local;
2. temporary quiesce of VM121 automatic agent/reconcile triggers;
3. two explicit wg-access-reconcile.service runs;
4. restoration of the exact pre-proof trigger active/inactive states.

The ERR handler performs fail-safe runtime recovery: it restores VM121 trigger states and, if a VM100 allocator restart was attempted, ensures the allocator process is running. No source rollback or snapshot restore is applicable.