Writes and reads kept apart, and a multi-step change tracked as a saga that can be undone. r10c writes through a transaction facade built this way.