Recovery Procedure for State C

To process a reply

1. Start a transaction

2. Dequeue the reply

3. If there’s an earlier logged device state for this

reply and it differs from the current device state,

then ask the operator whether to abort this txn

4. Persistently log the current device state with

the reply’s ID. This operation is permanent

whether or not this transaction commits.

5. Perform the operation on the physical device

6. Commit

Log