Field notes and practical architecture guidance

Automated Commit Recovery reverted nothing during a widespread Panorama-induced outage — because the connectivity check reported success against a policy that was already blocking all traffic. What the logs showed, why it happened, and the one pre-rule that would have prevented it.