Elixir Release Handler: Determining Safe Rollback Path After Upgrade Failure
Goal Recover the node to a stable state after a :release_handler upgrade fails. Constraints OTP’s release handler does not provide an automatic rollback. A failed callback leaves the node with a mixture of old and new modules. The decision to purge or keep partially loaded code is unclear, and the semantics of :code.purge vs :code.load_file differ across OTP