3 ms·

This could be solved with transactions: If all processing takes place within transactions, then you can always return to a clean state after a crash.