[tehlike]

You can selectively bypass many roll out procedures in a properly designed system.

[lima]

If there is a proper rollout procedure that would've caught this, and they bypass it for routine WAF configuration changes, they might as well not have one.