perform the non-reversible action only after the data is committed 2. **Made idempotent** — design the receiving system to detect and ignore duplicates (using a unique identifier like transaction ID) 3. **Performed within the same unit of recovery** — use two-phase commit with MQ Series or other XA-