01 · capture
Capture the rollback point
Record the rendered Compose model and current image references, then create one matched database-and-files backup set.
Complete when
The current site can be associated with one dated configuration and recovery set.
02 · quiesce
Control writes
Choose a low-write window and account for publishing, comments, orders, forms, and background activity that can diverge during the change.
Complete when
The acceptable write-loss boundary and update window are explicit.
03 · apply
Apply one bounded change
Review WordPress, plugin, and theme compatibility, change the intended image or configuration boundary, and complete any required database update.
Complete when
The new application and database state start without replacing the rollback set.
04 · verify
Prove the public workflow
Check the public page, administration login, publishing or form path, media upload, permalink behavior, scheduled work, and HTTPS route.
Complete when
The user-facing write and read paths pass before the rollback point expires.