The rollback problem

When an agent does exactly what it was authorized to do — but the instruction was wrong, and now thousands of accounts or work orders are affected — what’s your reversal plan? Has anyone modeled a compensating-transaction strategy across IS-U, OMS, and PSCD, or are we assuming we’ll never need one?