# Rollback runbook (P7.OPS.04)

1. Freeze payments: disable `checkout_enabled`.
2. Enable `maintenance_read_only`.
3. Revert DNS to prior origin / Shopify if still available.
4. Communicate ETA to customers.
5. Tabletop: walk this list quarterly.

Do **not** re-import ledger rows from Shopify mid-incident.
