Default rollback owner: Release Manager.
Rollback allowed when error budget burn exceeds 3% and no active schema migration is in progress.