A red infrastructure run is not a rollback. Reliable automation must preserve partial state and verify cleanup before declaring resources gone.