Skip to content

Free for nonprofits, NGOs, think tanks, and institutes. Grant funded by James Scott, administered by the Embassy Row Project.

ArtOfTheHack home

KRYOS-XS Hypercube method

Reversibility and Rollback Modeling

No action is recommended for automatic execution unless a validated reversal path exists and has been recorded in advance.

What it is

The method in plain terms

Every candidate action is classified by reversibility: fully reversible, reversible with cost, or irreversible. For each reversible action, the specific systems, sequence, and time required to restore prior state are recorded before execution.

Irreversible actions are never eligible for bounded automation and always require explicit human authorization.

Why it matters

The worst outcomes in small-organization incident response come from irreversible actions taken quickly under pressure. Requiring a rollback path before execution converts urgency into sequence.

Applied

How it is used in a nonprofit environment

  • Confirming in advance that an automated session revocation can be restored within a known window
  • Blocking automated actions against systems with no tested restore path
  • Giving the executive director a written reversal plan before authorizing containment

Limits

Where the method stops

  • Reversibility is assessed against the systems the overlay can observe
  • Some consequences, such as an adversary learning it was detected, cannot be reversed by any technical path

Rollback executes through the organization's own systems, using the same authority model as the original action.