If active schema migration or checksum mismatch is detected, the rollback decision owner switches to Incident Commander.
Before rollback: complete checkpoint validation and obtain explicit DBA acknowledgment.