Post-mortem: Preventing broken updates from being pushed out?