// Reversible by default, gate the irreversible · lesson 07
When "we can always send a correction" is a lie
The most expensive mistake in this whole track is not being too slow or too fast. It is miscategorizing: calling an action reversible when it is not. And the most common way people do that is telling themselves "if it is wrong, we can always send a correction."
You cannot. A correction is not an undo. When you send a wrong email to your list and follow it with a fix, you did not reverse the first email. You sent two emails, the second of which announces to everyone that the first was a mistake. The recipients saw the error, formed an impression, and some of them acted on it. The correction does not erase any of that. It just adds a public admission on top.
Why does this illusion cost so much?
Because it quietly moves an irreversible action into the reversible bucket, which strips off exactly the ceremony that action needed. Once you believe you can undo a send, you stop gating it. You let the model fire it off, because hey, worst case we correct it. Then the worst case arrives and there is no correcting it, only apologizing for it, and the apology has its own blast radius.
The same lie shows up all over. "We can roll back the deploy" ignores the users who hit the broken version and the data they created in it. "We can refund the payment" ignores that the money left, the customer noticed, and trust took the hit whether or not the dollars come back. "We can restore from backup" assumes the backup exists, is recent, and actually restores, three things people discover are false at the worst possible moment. In every case the action left a mark that the so-called reversal does not remove.
The discipline is to be honest about the difference between undo and repair. Undo returns the world to before, as if the action never happened. Repair leaves the action in place and tries to patch the damage. If the best you have is repair, the action was irreversible, and it needed a gate. Do not let the existence of a repair path talk you out of the ceremony the action deserved in the first place.
The takeaway: A correction, a rollback, a refund, and a restore are all repair, not undo. If the reversal leaves a mark, the action was irreversible, so gate it like one instead of pretending it can be taken back.