Versioning & rollback
An update that cannot be rolled back is a risk the business carries silently
We version deliberately, keep the previous release available, and make sure the deployment route can return to it without a site visit. For internal tools this is usually straightforward. For software running on machines you do not physically control, it needs designing in from the start, because the recovery options shrink the moment the software is out of your hands.