# P23C R04 rollback

This STEP deletes only the single explicitly authorized invite artifact created
by the failed P23C R03 fence probe.

Two encrypted backups are created under `/root/router-db-backups/` using the
existing root-only key `/root/.config/wg-access/db-backup.pass`:

1. `wg-access-p23c-r04-validation-*.dump.enc` — current DB backup restored to a
   clone and used to prove the exact cleanup before writers are touched.
2. `wg-access-p23c-r04-rollback-*.dump.enc` — backup created after all known
   writers are quiesced and independently restore-verified before live DELETE.

If a live write started and `CORE_DATABASE_CHANGE_COMPLETE=false`, the whole DB
is restored from the rollback backup while writers remain quiesced. This
intentionally restores the pre-step one-row artifact state rather than guessing
at a partial repair.

After `CORE_DATABASE_CHANGE_COMPLETE=true`, do not restore the artifact because
of a later runtime/publication/archive failure. The clean baseline has then been
independently proven; use continuation semantics.