During a late-night outage, a transit-authority developer finds a misconfigured runtime on a production host and is tempted to SSH in and edit files until the service recovers. Which immutable-infrastructure response is the cloud-native alternative?

Immutable infrastructure treats hosts and images as disposable: when something is wrong, you replace it with a known-good revision rather than mutating production in place. That keeps environments reproducible and makes rollback a redeploy of a prior artifact. Live patching, silencing health checks, and serving from laptops increase drift and risk.