Rule 9 of 9 · Chapter III — Package & Ship
Production deployments go through the pipeline, with a written rollback.
Why this rule exists
A manual 6pm import is how a tenant ends up in a state nobody can reproduce. The pipeline gives you the same artifact, the same steps, and an audit trail; the rollback line means the bad night ends at ten minutes, not at midnight.
In practice
The rollback is usually: re-import the previous managed solution version, then publish. Write the exact command and the artifact location into the deploy ticket before you start.
When it doesn't apply
A true sev-1 hotfix can go manual — with a second person watching and the rollback zip already downloaded.