# Data change plan for [outcome]

**State:** Proposed / In progress / Verified (actual state)
**Owner and environment:** [known owner; scoped targets]

## Current and target state

- Owning service/store/schema and actual migration mechanism:
- Requirement, compatibility window, affected application/consumer versions:
- Data scale/classification, retention and access implications:

## Execution order

| Step | Schema / application / backfill action | Preconditions | Verification | Failure/recovery |
|---|---|---|---|---|
| 1 | [compatible change] | [versions/backup/lock constraints] | [observed invariant] | [safe recovery] |

## Data and rollout controls

- Batching, resumability/idempotency and locking/resource behavior:
- Representative nonproduction migration tests and partial-failure cases:
- Backup/export/restore evidence when needed:
- Irreversible steps and forward-recovery limits:
- Exact-target review for authorized destructive operations:

## Result

[Actual migration/release identities, checks, open gaps and what was not executed. Do not promise automatic downgrade when the mechanism does not support it.]