Change Window

Rehearse risky changes with explicit success, stop, and rollback conditions before execution.

Change Window is a local runbook for changes that should not be improvised under pressure. Every step must name the action, its owner, expected duration, success proof, stop signal, rollback action, and whether the step is reversible. The readiness audit highlights missing evidence, missing owners, irreversible work, and a plan that exceeds its selected maintenance window. Run mode shows only the current live step and its three possible outcomes: accept the success proof and continue, stop at the declared signal, or record rollback. A chronological window log records those deliberate choices. The included shadow-index migration demonstrates a complete four-step plan and an intentional window-overrun warning. The extension does not connect to infrastructure and cannot execute a deployment, migration, command, or rollback. It is intentionally a rehearsal and logging surface whose records remain local. A JSON record can be exported by the user for a local archive.