As a cloud operator I want to be able rollback my failed update procedure to last known working state (before update) so that I don't lose my environment.
To be revived in a new RFE when that becomes relevant again.