Title: A recovery/integrity architecture for a data system