launcher-next/docs/architecture/rollback-mechanics.md

Rollback mechanics

Rollback is performed only after the pilot-owned AutoCAD PID has exited. It restores pointer contents from the persisted snapshot, removes the generated SCR, cleans staging, deletes the activated pilot version, and writes session state RolledBack.

If an application process exits unexpectedly, pilot rollback can be run in a new Launcher Next process because it reads the persisted session and activation snapshot.