When migrations go wrong there should be an option to roll back to your prior state?

[Connoropolous]

trafficstars

[Connoropolous]

cc @zippy will try to tackle on this this month

[Connoropolous]

another way to approach this is to say that the whole migration should be: step 1: prepared step 2: committed

If anything goes wrong during the preparation that's fine. Eject.

Make step 2 one holistic update that either succeeds or fails all at once, so that it's atomic. And then again, if anything goes wrong, it just safely ejects.