What is the safest Bolt.new checkpoint before a large change?

I keep seeing three different safety nets suggested: connect GitHub for file history, download the project as a portable snapshot, or duplicate the project inside Bolt. They protect different layers, and recent regression threads make the gaps matter.

Which one has actually let you recover from a bad large change? More importantly, what did it fail to preserve: database state, secrets, deployment settings, or something else?