Why IT-style rollbacks fail in industrial control systems

In web services, 99.9% uptime means ~8.7 hours of downtime per year, but in industrial OT, a single mid-batch failure can scrap product, damage equipment, or cause safety incidents. Rollbacks are often impossible mid-process because the physical state has changed. Developers must design for graceful degradation and test against physical constraints, not just software ones.