Local to global reasoning
•Organization checks each app program as a separate task
–Each app program running on its own moves from state where integrity constraints are valid to another state where they are valid
•System makes sure there are no nasty interactions
•So the final state of the data will satisfy all the integrity constraints