Sure but that’s why I think the take-away here is to design the system such that you can do such automated rollbacks. For example, the devices should also be co

Sure but that’s why I think the take-away here is to design the system such that you can do such automated rollbacks. For example, the devices should also be connected to some sort of isolated management network. Granted, pushing out a config to the routers could also break their connections to said management network, but it is less likely anyways.