Recovery_Rollback_Protocol

Deterministically restores system state after a failed manifest execution by ingesting failure details, traversing registered manifest steps in reverse order, executing only idempotent compensating tool calls scoped to a single manifest_id, checkpointing progress for resumability, emitting heartbeat signals, and producing an auditable rollback summary that references (but never reveals) Attestation Shim token identifiers per recovery action.