Design commitments with recovery protocols built…

Design commitments with recovery protocols built in from the start, because failure is a structural feature of commitment systems, not an exceptional event.