closing files, releasing database connections, or restoring state. Even if an unhandled exception propagates up, `finally` runs first.