Limitations of Model-based Configuration Management
All transitions must be directly commandable. Requires hand coding nonlocal control procedures.
proc close(valve) unless on(driver) turn-on(driver); send(driver,close-valve)
Presumes that commands can be interleaved arbitrarily without destructive interaction or changes in effect.
close(valve); turn-off(driver) OK
turn-off (driver); close(valve) WRONG