Feature flag incident rollbacks: the records that explain how a rollback exception was handled

Short answer

The records that explain a feature flag rollback exception are the flag change itself (which flag, environment and targeting rule, who changed it and when), the incident messages that say why, the recovery check that shows whether it worked, and the postmortem that records the decision. Together they show the problem, the authorized action and the checked result. A partner asks the engineering director whether those records still link, then introduces someone who can authorize a licensing discussion.

Visual briefFull-size diagram
Before and after panels of three customer regions: before 09:31 the EU region shows errors with the new engine on for 20%, after 09:31 only the EU region is switched off and recovered, with three linked records below: flag change, incident log and recovery check.
Illustrative: a fictional partial rollback that changed one customer cohort, and the three records that prove what changed.

Which records help a company explain how a rollback exception was handled?

The records that show the initial problem, the authorized action and the checked result. A partial rollback is an exception worth documenting because the incident ticket often says "rolled back" while the flag history shows that only some customers were changed.

Ordinary rollbacks are easy to describe: a release breaks, the flag goes off, the errors stop. The exceptions are the cases where the responder chose something narrower or stranger than "everything off": one region, one segment, one percentage step back, or a rollback that was reverted when it made things worse. Those choices are judgment calls, and the history only explains them when the flag change and the incident record can be read side by side.

Worked example: a rollback that changes only one customer cohort

Illustrative. A fictional 320-person B2B software company serves customers from three hosting regions. It is releasing a new scheduling engine behind a flag, on for 20% of accounts in every region. All names and times are invented.

  1. 09:12, incident opened. Monitoring raises an alert for elevated errors in the EU region. The on-call engineer is paged.
  2. 09:20, acknowledged. The responder posts in the incident channel: errors are limited to EU accounts with the new engine on.
  3. 09:31, flag change. The responder edits one targeting rule so the EU region segment is served the old engine. The US and AU regions stay at 20%. The incident note reads "rolled back new engine".
  4. 09:45, recovery check. The EU error rate is back at its baseline; US and AU show no change. The responder records the check in the incident.
  5. 10:05, resolved. The incident is closed with the incident log covering 09:12 to 10:05.
  6. Day 3, postmortem. The review records the cause, the decision to roll back one cohort rather than all, and a follow-up to fix the engine before re-enabling the EU region.

The note at step 3 says "rolled back"; the flag history says one rule for one segment. Only the two records together show what was actually decided: a scoped rollback that kept the release running for most customers. That is the kind of judgment, with its evidence and outcome, that makes incident histories useful for training and evaluating agents that do operational software work.

Targeting rules make this kind of decision possible. LaunchDarkly's documentation describes a targeting rule as a set of conditions plus a rollout that serves one variation or a percentage of contexts, and rules can match contexts by segment. A rollback that edits one rule for one segment is ordinary platform behavior; the exception is that the incident record does not say so.

The record map: what each record proves

Each record answers a different question about the exception. If one is missing, the case still exists but loses part of its meaning.

RecordTypical systemFields that matterWhat it proves
Flag changeFlag platform change historyFlag key, environment, rule edited, member, timestamp, before and after valuesExactly which customers were changed, by whom
Incident timelineIncident platformStatus timestamps, responder actions, notificationsWhy the change was made and how fast
Incident channel messagesTeam chatResponder notes, hypotheses, approvalsThe reasoning between alert and action
Recovery checkMonitoring, noted in the incidentMetric, cohort, baseline, time of checkWhether the scoped rollback worked
PostmortemDocument store or wikiImpact, actions taken, root cause, follow-upsThe accepted explanation and next step

The vendor documentation supports why the first two rows are usually the strongest. LaunchDarkly's change history records changes to flags per environment, showing the member, resource, environment, date and a diff, and can be filtered by project, environment and action. PagerDuty gives each incident a timeline with timestamps for each status, the actions taken and the notifications sent, and its REST API can list log entries for an incident. The postmortem closes the loop: Google SRE authors describe a postmortem as a written record of an incident covering its impact, the actions taken to mitigate or resolve it, the root causes and the follow-up actions.

What separates a useful rollback history from a thin one

A partner cannot judge quality from records, and should not try. These are questions the engineering director can answer at metadata level:

  • Join keys. Do incident records cite the flag key, or can the two be joined by environment and time?
  • Scope recorded. Do notes say which cohort, region or percentage changed, or only "rolled back"?
  • Checks written down. Is the recovery check recorded in the incident, or only seen on a dashboard at the time?
  • Postmortem habit. Roughly what share of rollback incidents got a written review, and over which years?
  • Volume and span. About how many rollback incidents exist, and how far back does the flag change history go?

The exception workflows guide uses the same problem, action and result test for purchasing, and the incident and on-call records checklist covers incident data more broadly.

Does the company qualify, and what stays unknown?

The introduced company needs 50+ full-time employees at peak (contractors excluded), a documented operating history, rights to license the records, and an authorized contact. Companies in the U.S., Canada and the EU qualify, as do companies in the UK, Australia, New Zealand, India, Singapore, South Africa, Latin America, the UAE and Saudi Arabia when at least 90% of the data is in English.

What stays unknown until SourceX reviews it: whether customer-identifying details in incident messages can be removed, which records the company has rights to license, SourceX's current data needs for this record type, and any offer. The data rights explainer covers the rights review in general terms. Partners sign the Channel Partner Agreement before submitting introductions.

Go deeper on feature flag incident rollbacks

Next step

Refer a company. Earn up to $100,000. Default reward: 25% of Actual Supplier Payout, capped at $100,000 cumulatively per referred company. Eligibility and payment conditions apply, and a signed Schedule A or addendum can differ. A lead, meeting or signature alone does not trigger payment.

If a client's rollback incidents can still be traced from flag change to recovery check, register as a partner, check the company against who qualifies, and read the terms and reward rules before you send the brief.

  1. Step 1Share your linkSend your personal link to a company you know.
  2. Step 2Company appliesThe company applies itself at /apply.
  3. Step 3Company signs and is paidThe company signs, delivers its data and is paid by SourceX under its agreement.
  4. Step 4You get your rewardYour 25% of the actual supplier payout. A reward becomes payable after SourceX has paid the referred company under its signed agreement and the payout conditions in the program terms are met, including finance approval and your tax and payment details.

Common questions

Is the flag platform's history enough on its own?

No. Flag history shows what changed and who changed it, but not why or whether it worked. The incident timeline supplies the why and the recovery check supplies the result, so all three are needed for one usable chain.

Does a homegrown flag system count?

It can, if it kept a change log with timestamps, environments and who made each change. Ask the engineering team how far back that log goes and how consistently changes were recorded.

Can the partner review a sample incident to judge quality?

No. Partners stay at metadata level: systems, record classes, years of coverage, counts and owners. SourceX reviews records only under its own agreement with the company.

Sources

  1. launchdarkly.com/docs/home/releases/change-history
  2. launchdarkly.com/docs/home/flags/target-rules
  3. support.pagerduty.com/main/docs/incidents
  4. sre.google/static/pdf/login_spring17_09_lunney.pdf
  5. refer.sourcex.si/terms

Free resources

Know a company with valuable proprietary data?

Become a referral partner, get your link and introduce the company’s CEO (in an owner-run company, usually the owner). Referral partners can join from most countries. We can't work with partners in countries or regions under U.S. sanctions or on U.S. restricted-party lists. The companies you introduce should be based in the U.S., Canada and the EU, or in the UK, Australia, New Zealand, India, Singapore, South Africa, Latin America, the UAE and Saudi Arabia with at least 90% of their data in English.

Refer a company →

I own a business

Explore licensing your company's data directly to SourceX for AI training and evaluation. Start a short assessment; no uploads needed.

Start an assessment