Collapse Undo Configuration Exception
The undo was wired with something it cannot work from: no audit records to authorize it, or a proposition store that cannot subtract evidence atomically. Both are configuration mistakes, and both are thrown before the undo reads or writes anything.