rsync -a Stole the setgid Bit, and systemd Blocked the Rollback
The first automated deploy of a small Node.js app went red, and the rollback failed too. Two independent mechanisms, each harmless alone: rsync copying permissions it had no business copying, and a systemd start limit that outlived the crash loop it was meant to contain.