Signed
Settings / Update
Failsafe System Update Center
Main backend update settings for signed updates, preflight gates, automatic backups, rollback points, automatic restore on errors, and alert notices.
Safe Update
Automatic
Backup
Advanced
Failsafe
Auto
Restore
Update Flow
check_update_availabilityvalidate_license_and_supportvalidate_server_compatibilityverify_manifest_signatureverify_package_checksumenable_maintenance_modecreate_auto_backupcreate_rollback_pointinstall_update_filesrun_database_migrationsrun_post_update_health_checkssend_success_alert
Advanced Failsafe
preflight_requirement_gatedisk_space_gatedatabase_connection_gatequeue_pause_before_updatemaintenance_mode_lockatomic_file_swapmigration_transaction_guardpost_update_health_probeupdate_lock_to_prevent_parallel_runsautomatic_restore_on_failure
Auto Backup
application_filesdatabase_dumpenvironment_snapshotinstalled_manifest_snapshotstorage_symlink_statemodule_registry_snapshotlicense_certificate_snapshot
Auto Restore
stop_update_runkeep_maintenance_mode_enabledrestore_files_from_backuprestore_database_from_backuprestore_environment_snapshotrestore_previous_manifestclear_failed_cacherun_recovery_health_checkrecord_failure_audit_eventsend_critical_alert_notice
Alert Notices
update_availablepreflight_failedbackup_startedbackup_failedupdate_startedupdate_failedauto_restore_startedauto_restore_completedrollback_requiredrollback_completedupdate_completed
Admin Guards
system_owner_permissionmfa_required_for_updatelicense_update_entitlement_requiredhealthy_backup_requiredmaintenance_mode_requiredaudit_event_required
Rollback And Auto Restore Rules
Any critical failure during download, signature verification, backup, file replacement, migration, cache rebuild, or health check triggers automatic restore from the latest valid backup point and sends a critical alert notice.
automatic_on_failure
manual_admin_rollback
control_plane_revocation_rollback
post_update_health_failed
last_known_good_version
error_rate_threshold
Alert Notice Required
Admins must receive dashboard, email, SMS, in-app, or webhook alerts for update failures, backup failures, auto-restore start/completion, rollback required, and rollback completed events.