Robust rollback plan for critical software releases