Every save creates a version with a visual diff. Runs record which version executed. Rollback restores any version in one click. Convention: note the why in the version description.
How versions work
Saving a workflow snapshots it. The version list shows author, timestamp, description, and a step-level diff against any other version. In-flight runs complete on the version they started.
Run-version linkage
Every run in the history records its version. Debugging "it worked last week" starts by diffing last week's version against today's — the answer is usually right there.
Rollback
One click restores a previous version (as a new version — history is never rewritten). Enabled state persists through rollback.
Discipline
Write the why in version descriptions ("raised ICP threshold to 80 per Q3 review"), and for material changes to high-volume workflows, test-mode the new version before saving live.