A Rollback Drill and a Per-Commit Green Gate for Messy Refactors

Conclusion first: the smallest safe change is the one you can undo in one command and re-check in one...