The board on the corridor wall was not a backup. It was the actual system, and the software was the thing people worked around. Getting off it meant earning the board back.
Nobody would sign off a single weekend, and they were right not to. So we did it nine times, in windows small enough that a rollback was never the interesting decision.
