Rollback first or patch forward during a bad deploy?

A production incident question about when rollback is safer than a small corrective patch.

When a deploy starts breaking production, rollback feels obvious, but it is not always the smallest risk. If the previous build is trusted and compatible, rollback first reduces exposure. If the bug is narrow and rollback crosses migrations or dependency state, patch forward may be safer. What evidence do you require before choosing either path?