Recovery-oriented Computing - System-wide Undo Support

System-wide Undo Support

The ability to undo across different programs and time frames is absolutely necessary in this type of system because human error is the only cause of system failures. Humans innately have the mind to do so. Not having undo support also limits testing aspects of a production system because it doesn’t allow for trial and error.

System-wide undo support should cover all aspects of the system. This includes hardware and software upgrades, configuration as well as application management. There are obviously limits to what can be undone, and these limits are currently being explored, tested and rated based on their tradeoffs.