The mechanism
Before-images are captured at apply — rollback replays reality. And drift detection blocks the apply when production moved under you.
Sandbox
A safe clone of production to build against.
Change set
Itemized: entity · view · script · component.
Build
The set becomes an immutable, hashed build.
Review
Each item tagged: schema · behavior · cosmetic.
Apply
Applied with before-images captured.
Undo replays reality, not a guess — before-images are captured at apply, and if production moved under you, drift detection blocks the apply until you rebase.
A one-click sandbox copy of production, data masked
Edits collect in an itemized, content-hashed change set
Each item tagged schema, behavior or cosmetic
Applied to production — blocked if production drifted
Rollback replays the before-images captured at apply
The details an RFP answer needs — all verifiable in a demo.
One-click sandboxes
Clone production in one click — model, rules and test data — and build without fear.
Copy profiles (masked test data)
Masked and sliced data profiles keep sandboxes honest while keeping sensitive data out — integrations auto-deactivate on copy.
Change sets
Entities, views, scripts and components collect into one reviewable unit.
Reviewed, classified applies
Review classifies each item — schema, behavior, cosmetic — so approval is informed, not ceremonial.
Undo via before-images
Before-images captured at apply mean undo restores what was actually there.
Drift detection
Fingerprint baselines block the apply when production moved under you.
Metadata packages
Versioned, installable packages with uninstall — move capability between environments cleanly.
Environment promotion history
Every promotion recorded: what, when, by whom — with the diff a click away.