I see. Valid points.
Whenever you break a production site - do you try to add a test which
simulates the parameters of the breakage?
It sounds to me like some sort of an image versioning could still help
here, that way you can really "roll back" (actually boot to a previous
version of the image)
It's radio antenna.
It is of course tested before to some extent, in a "staging" environment.
But since the physical environment varies, and sometimes antenna related
parameters change between releases (e.g., duration of receive time), it is
not easy to know you're not breaking something for
