One intent, one operation
A publish request receives a stable request hash. Repeating it cannot accidentally create duplicate articles, and every destination response is recorded.
Rollback is part of publishing
A safe system remembers the exact release, destination identifier, and prior state. That makes rollback an ordinary governed operation instead of an emergency reconstruction.
Good systems do not ask people for blind trust. They make confidence inspectable.