Health-gated deploys and rollback for PM2. Rolls a release out one instance at a time, checks each one before touching the next, and puts the previous release back when the new code fails. pm2 reload ...