Safe Execution & Rollback
Changes with built-in safety. SafeApply backs up, tests and reloads web-server configs, then watches the service and reverts automatically if it fails. Config snapshots let you diff and restore earlier states.
SafeApply — 5-Stage Workflow
1
Back Up
The current config is saved to a versioned backup store on the agent before anything changes
2
Validate
The new config is checked with the service’s own tester (nginx -t, apachectl -t, haproxy -c) and reverted at once if the test fails
3
Reload
The service is reloaded with the new config; a failed reload restores the previous version
4
Health Watch
Service liveness is checked right after the reload, then watched in the background for 45 seconds
5
Auto-Revert
If the service crashes during the watch, the previous config is restored and the service reloaded
Health Gate Checks
Config testthe service’s own syntax checker must pass before the reload
Reload resulta failed reload restores the previous config
Process livenesschecked 5 seconds after the reload, then every 5 seconds for 45 seconds
Audit trailevery start, success and revert is written to the agent audit log
Snapshots & Time Travel
- On-demand config snapshots, stored locally on each agent
- Snapshot timeline showing type, trigger, user, size and duration
- File-level diff view with additions and deletions
- Restore gated by typing the server’s hostname
- Automatic snapshot before AI-assistant file edits made through SafeApply
- Versioned config backups with one-click restore in the Nginx, Apache and HAProxy editors
Change & Drift Detection
- File Integrity Monitoring records file changes on each server
- Behavioral fingerprint: per-host baseline with anomaly and drift scoring
- Snapshot diffs show exactly what changed between config states