At least once

1. restart task when executor fails.
2. recover from certain timepoint.