SYSE.41:2 - Problem
Deployment changes several coupled things: installed software, effective configuration, dependencies and sometimes persistent state. Some changes can complete before a command times out. The controller can fail while one instance already runs the new binary with the old configuration.
Blindly repeating the whole job can duplicate resources or repeat a migration. Returning an old binary can also fail if the data or external contract has changed. The actual resulting runtime must therefore be recovered and tested independently of the controller’s summary.