The desired state of every environment lives in Git, and the cluster converges to it. Rollbacks are a revert and audits are the log.