# Rollback / continuation

Before semantic core, the STEP keeps an exact backup of the three modified pre-existing source files, removes the two newly introduced auth files on rollback, restarts `wgaccess-backend`, and verifies health.

Semantic core is reached only after:
- new backend generation is healthy;
- production external onboarding remains disabled;
- the isolated invite/magic-link/session security E2E passes;
- synthetic auth rows are cleaned.

After semantic core, publication or Machine Git/reporting failure is a continuation. Do not automatically restore accepted P26 source merely to make publication green.

P26 does not change DB schema, VM100, VM101, provisioning agent/lifecycle, or live `.env`.