Catastrophe
First: restore from a full backup
Then: Roll forward from log
- REDO all committed transactions
- Could actually REDO changes in reverse chrono order: i.e., only apply latest change
- T's interrupted by the catastrophe must be restarted or user notified