Durability
- Once a transaction completes successfully
(commits), its changes to the state survive
failures (what is the failure model ? ).
- The only way to get rid of what a committed
transaction has done is to execute a
compensating transaction (which is,