Editing Recovery-oriented computing (section)

==System-wide undo support==
{{seealso|Non-destructive editing}}
The ability to [[undo]] across different programs and time frames is necessary in this type of system because human error is the cause of about half of system failures.<ref>{{cite web |last1=Brown |first1=Aaron |title=Addressing Human Error with Undo |url=http://roc.cs.berkeley.edu/talks/pdf/undo.pdf |publisher=ROC Retreat |accessdate=24 February 2020 |ref=human_error |date=June 2001}}</ref> Not having undo support also limits testing aspects of a production system because it doesn’t allow for [[trial and error]].

System-wide undo support should cover all aspects of the system.  This includes hardware and software upgrades, configuration as well as application management.  There are obviously limits to what can be undone, and these limits are currently being explored, tested and rated based on their tradeoffs.