Consistency

• logical model includes semantic constraints, e.g. 1..1
• logical constraints, e.g. argument object existence
• persistence layer enforces these constraints
• performing an undo may violate a constraint