A migration can pass locally and still block a production table, break old application instances during a rolling deploy, or leave half a backfill impossible to resume. A generated rollback can be worse: recreating a column does not recover the writes that were accepted after cutover.
This skill reviews the whole release contract. It separates observed engine behavior from assumptions, maps old and new code against every schema state, checks lock and rewrite risk, designs bounded resumable backfills, and turns data invariants into go, pause, abort, and recovery gates. The result is a clear verdict plus an expand-migrate-contract plan, compatibility matrix, hazard register, verification matrix, and the last safe rollback point.
Use it before a large table change, index or constraint rollout, column replacement, data transformation, cross-database move, or recovery from a stalled migration. It starts read-only and does not apply DDL, move traffic, or claim a backup or test works without evidence for the exact engine, version, and environment.