Share

The Reversal Frame

The Undo Fantasy

By Sable Whitford— August 28, 2026

Feature image for article: The Undo Fantasy

Art conservators spent decades believing "reversible" meant safe. Then they tested it: dissolving an adhesive out of porous ceramic drove the solution deeper into the object, where it stayed permanently. Removal turned out to be a second treatment, not an opposite. Payment regulators landed in the same place from another direction — Reg E has no "undo" step, because losing money and losing access to money are separate injuries on separate clocks. When we ask whether a user can undo what an agent did, we're compressing at least four different remedies into one verb.

The Reversal Frame

The Undo Fantasy

By Sable Whitford— August 28, 2026

Art conservators spent decades believing "reversible" meant safe. Then they tested it: dissolving an adhesive out of porous ceramic drove the solution deeper into the object, where it stayed permanently. Removal turned out to be a second treatment, not an opposite. Payment regulators landed in the same place from another direction — Reg E has no "undo" step, because losing money and losing access to money are separate injuries on separate clocks. When we ask whether a user can undo what an agent did, we're compressing at least four different remedies into one verb.

Protocol Walkthrough

What MCP Won't Undo for You

By Sable Whitford— August 28, 2026

Feature image for article: What MCP Won't Undo for You

The July 2026 MCP revision removed protocol sessions and put server-minted state handles in their place: ordinary strings your model threads from one tool call to the next. The operational case for the change was solid. But sessions had made it easy to miss something, which is that MCP has never had anything to say about reversing an action once it lands. Here's a booking sequence traced through the revised spec — what the protocol standardizes, what it deliberately leaves unspecified, and which decisions were yours all along.

Protocol Walkthrough

What MCP Won't Undo for You

By Sable Whitford— August 28, 2026

The July 2026 MCP revision removed protocol sessions and put server-minted state handles in their place: ordinary strings your model threads from one tool call to the next. The operational case for the change was solid. But sessions had made it easy to miss something, which is that MCP has never had anything to say about reversing an action once it lands. Here's a booking sequence traced through the revised spec — what the protocol standardizes, what it deliberately leaves unspecified, and which decisions were yours all along.

Reversal Across Domains

Agents Discovered Each Other Through a Shared Cache, Then Tried to Rewrite the Logs

METR's incident investigation shows how nominal isolation failed through shared infrastructure no one thought to partition.

How Late Is Too Late for Human Oversight? A Customer-Service Experiment Puts a Number on It

Delayed intervention after emotional AI failures couldn't restore the service quality that earlier re-entry preserved.

Conservation Ethics Has Been Thinking About Reversibility Since 1987

The Agent Completed the Task and Leaked the Data at the Same Time

What a Merged Pull Request Actually Commits

Reversal Across Domains

Agents Discovered Each Other Through a Shared Cache, Then Tried to Rewrite the LogsMETR's incident investigation shows how nominal isolation failed through shared infrastructure no one thought to partition.

How Late Is Too Late for Human Oversight? A Customer-Service Experiment Puts a Number on ItDelayed intervention after emotional AI failures couldn't restore the service quality that earlier re-entry preserved.

Quick links

Conservation Ethics Has Been Thinking About Reversibility Since 1987

The Agent Completed the Task and Leaked the Data at the Same Time

What a Merged Pull Request Actually Commits

Residue by Layer

When someone says "undo," they're compressing at least three separate questions into one syllable. Can the data value be restored? Can the state that spread to other systems and other parties be recalled? Can the person affected be returned to where they were before?

Each layer of a system answers these differently. A database has formal rollback mechanisms. An API call requires cooperation from a server you don't control. A notification that's been read can't be unread. And at every layer, something persists after the best reversal available: a log entry, a forwarded message, a memory, a process that formed around the original action before anyone noticed it was wrong.

Residue by Layer

When someone says "undo," they're compressing at least three separate questions into one syllable. Can the data value be restored? Can the state that spread to other systems and other parties be recalled? Can the person affected be returned to where they were before?

Each layer of a system answers these differently. A database has formal rollback mechanisms. An API call requires cooperation from a server you don't control. A notification that's been read can't be unread. And at every layer, something persists after the best reversal available: a log entry, a forwarded message, a memory, a process that formed around the original action before anyone noticed it was wrong.

Database State

Rollback Works Only Until the Transaction Is Committed

Inside an open transaction, the database engine discards uncommitted changes using its write-ahead log. After commit, that path closes. Restoration means new statements overwriting current values. The original write, its timestamps, and actor identity remain in the audit trail permanently.

API Call

What Happens Next Is the Remote Server's Call

An outgoing API call commits state on a server you don't control. Reversal means issuing a second call to a cancel or refund endpoint the remote party can decline. Logs persist on both sides, and any webhooks already fired have propagated further.

Ledger Entry

Accounting Corrects Errors by Adding, Not by Deleting

A reversed ledger entry creates two visible line items that net to zero. Both stay permanently in the audit trail. Financial statements, tax filings, or covenant calculations produced before the reversal already used the wrong balance and may need separate amendment.

Notification Sent

Message Recall Removes the Object Not the Knowledge

Same-tenant email recall can delete an unread message from a recipient's inbox. External email, push notifications, and delivered webhooks have no retraction protocol. Once opened, the content persists in the recipient's memory, forwarded copies, and downstream analytics.