HAL Id: inria-00073339
https://hal.inria.fr/inria-00073339
Submitted on 24 May 2006
HAL is a multi-disciplinary open access archive for the deposit and dissemination of sci- entific research documents, whether they are pub- lished or not. The documents may come from teaching and research institutions in France or abroad, or from public or private research centers.
L’archive ouverte pluridisciplinaire HAL, est destinée au dépôt et à la diffusion de documents scientifiques de niveau recherche, publiés ou non, émanant des établissements d’enseignement et de recherche français ou étrangers, des laboratoires publics ou privés.
Fault Tolerant Software Architectures
Titos Saridakis, Valérie Issarny
To cite this version:
Titos Saridakis, Valérie Issarny. Fault Tolerant Software Architectures. [Research Report] RR-3350, INRIA. 1998. �inria-00073339�
a p p o r t
d e r e c h e r c h e
INSTITUT NATIONAL DE RECHERCHE EN INFORMATIQUE ET EN AUTOMATIQUE
Fault Tolerant Software Architectures
Titos Saridakis and Val´erie Issarny
No 3350
TH `EME 1
&('*),+.-/021'435067'4-809"3;:0<>=?1'>@BAC--0197D
EFHGJI(KMLONQPSRJTUKJV?WYXK[ZSTU\]T^ZUGJI(KJT
_a`UbdceKJZSfYbhgjijk]bl`
PmVhn2n2bl`^Zk]K`UKJoCF]K`UoCFHKqprhs?s?tduvN NwL,xynHVhzhKJT
{|}J~[Hh~h b?nHijp]zBK[X]nHg ioijZ^gj\ijZUFvVdijgWH`^KTkHWH`UijpHzZF]Ko[b?pHo[KJn]ZUi blpvV?pHkZF]K8k]KT^ijz?pbdT^bhZe
Vh`UKk]K[?K[gjb?nHI(KJplZoblI(nHg io[VhZ^KJTTUijz?p]i o[V?plZ^gj\ZUF]Kk]KT^ijz?pHKJ`JTceb?7$EF]Kk]KJTUi zlpo[b?IMn]gjKX]ijZ\8g KVhkHT
ZUbTUbdZVh`UKSk]KJTo[`UijnHZ^ijb?pHTk]i8oJW]g ZZ^bW2pHk]KJ`TUZUVhp2k?SFHijoCFFHV,?KSZ^byWHpHk]K`^z?bIMVhpl\yTUijIMn]gji o[VhZ^ijb?pHT
W2p?ZUi gZF]K[i`(`T^ZyWHpHo[Z^ijb?p]ip]zhKJ`TUi blpEbTUW2nHn2bl`^Z(ZUFHKBTU\]T^ZUKJIMVdZUijok]KJhK[gjb?n2IyKplZbdOob?IMn]gjKX
V?W]gjZaZ^b?g K`UV?plZaT^bhZ V?`^K?hZF]ijTnHV?n2K`anH`Ub?nb?TUKJTVgV,\hK`^Kk`VhI(KJbl`U¡b?`ZUF]KOVhpHVhg \]TUijTabd7ZUFHKmV?W]g Z
ZUbhgjKJ`VhpHo[KT^bhZ V?`^KnH`Ub?nKJ`UZ^ijKJTJSF]K`^KZF]K8ZUb?nYI(b?TUZgjV,\?KJ`nH`UbYijk]KTZUF]KIyKVhpHTb?`Tn2Koi \Yijp]z
ZF]KVh2T^Z`UV?oZVdijgjWH`UKTUKJIMVhplZ^io[T K[X]n2`^KTUTUKJkijpZF]KijpHi ZUijVhg7ob?p2oKJnHZ^ijb?pT^ZVdzhK?HVhpHkKVhoCFTWHoJoKJTTUi ?K
gV,\hK`ijTyV¢`UKp]KI(KJplZZ^bVh`kHTV?pK[gVhb?`VdZ^KkvkHKJTo[`Uijn]ZUi blpbdSVBV?W]g ZZ^bhgjKJ`VhplZTUbdZVh`UKVh`oCF]i
ZUKJo[ZUWH`UKh£KnH`UKJTUKJplZyZUF]Kg b?zhio[Vhg?KJF]iogjKZFHVdZMn2K`UI(ijZUTM`UKJVhTUb?pHijp]zb?pZF]KK¤YW]i Vhg KpHoKb?`yZUF]K
o[b?IMnHVhZ^i]i gjijZ\bh5ZF]KVh`Uijb?WHTK[XHnH`^KTUTUijb?pHTbhV?W]gjZmZ^b?g K`UV?pHoKn2`^bln2K`^ZUi KTSVdZSV?`^ijb?WHTV?HTUZU`VhoZUi blp
gjK[?K[gT[¥epMVhkHk]ijZ^ijb?p7h KSnH`^bln2blT^KVIMVhnHnHijp]zToCF]KJIMV2dSF]ioCF(nKJ`I(i ZT"ZUFHKSob?``UKJoZ5Z`UV?pHTebl`UIMVhZ^ijb?p
bhV?HT^Z`UV?oZKJplZUi ZUi KTijplZ^b8o[b?pHoJ`^KJZ^KOb?p]KT[Hk2WH`^ip]zV`UKp]KI(KJplZnH`^b]o[KJTT[
¦B§l¨.©ª« ¬}h `UoCFHi ZUKJoZWH`UKPSK®p]KJI(KJplZJ¯®VhW]gjZ°EbhgjKJ`VhpHo[Kh¯2b?`IMVdg"fYn2Koi o[VhZ^ijb?pHTJ.fYbdZVh`UK
`UoCFHi ZUKJoZWH`UKJTJ
±³²´Uµ4¶J·´¸¹jµ4º4»¼
Unit´e de recherche INRIA Rennes
} VSnH`UijTUK$KJpob?IMn]ZUKak]K k]RVhi gjgjV?pHoKTIMVdZUKJ`Ui KJg gjKJTK[Z7gjbhz?ijo[i KJg gjKJToblI(nHg i¤YW]Kak]K I(V?p]ijGJ`UK
TUijz?p]i o[VhZ^ijhK(g KTnHFHVhTUKJTk7V?pHVdgj\]T^K(K[Zk]KoblpHoKn]Z^ijb?pvkHWg b?zhioijK[g> KJZ^Z^Ko[b?IMn]gjKX]i ZURT^KMZU`Vhk2W]i Z
n2Vh`kHKJTk]KJTo[`UijnHZ^ijb?pHTkHW gjbhz?ijo[i KJg°k]i 8oijg KT oblI(n2`^KpHkH`UKhK[Zk]K[V?p?Z[Z`^Kob?p2T^ik]RJ`VhHg KIyKplZ
TUiI(nHg i 2R[KTn2blWH``^RVdgjijTUKJ`agjV(nH`UKJI(i G`^KOhK`UTUijb?pkHWg b?zhioijK[g> pk]KTUWHn2n2bl`^ZUKJ`g Kk]R[?K[gjb?nHnKJI(Kp?Z
TU\]T^ZURJIMVdZUij¤YW]K8k7WHp g b?zhioijK[g$ZUbhgjRJ`VhplZVhWYXvVhW]ZUKJTJ"p]b?WHTynH`Ub?nb?TUb?pHTWHpHKVhnHn2`^b]oCF]K8F]ijRJ`Vh`oCF]i¤YW]K
nb?W2`g*Vhp2Vdgj\YTUKk]KTmnH`Ub?nH`UijR[Z^RTg ijR[KTMgVZ^b?g R`UV?pHoKV?WYXV?W]Z^KT[VhpHT°oKoJVhkH`UKF]i R`UV?`UoCFHij¤YW]K?Hg K
nHgjWHTFHV?W]Zp]i ?KJV?W b?W2`Up]ijZOg KMI(b\hKJpvk]KMTUnRJo[i2K`°b?`IyKJg gjKJI(Kp?ZOgjKJTT^RIMVhplZ^i¤YW]KJTOk]KMk]RVhi gjgjV?pHoK
`UKJ¤YW]iTUKJTyg bl`UT(k]KgjVnHFHV?T^Kijp]ijZ^iVdgjKBk]KBgjVvob?p2oKJnHZ^ijb?p$KJZygjKJTMp]ijhKVhWYX TW]ij,V?plZUTMn2K`UI(KJZ^Z^KplZMW2p
`V8p]KI(KJplZzl`UV?kHW]KJg®?KJ`TWHp]Kk]KTUoJ`^in]Z^ijb?pR[gVhb?`UR[KkWHp]KVh`oCF]ijZ^KJo[ZUWH`UKOg b?zhioijK[gjg KOZ^b?g R`UV?p?ZUKOV?WYX
V?W]Z^KT[VhpHTo[K`UV?nHn2bl`^ZJ]p]b?WHTnH`URJTUKJplZUb?pHTp]b?ZU`UKOTUbhgW]Z^ijb?pn2blWH``VdiT^blpHp]KJ` TWH` g*RJ¤YW]ijVdgjKJpHo[K°blW
Hi Kp¢gVo[b?IMnHVdZUijHi gji ZUR(kHKJTOTUnRJo[ioJVdZUi blpHTk]K(n2`^blnH`^ijR[ZURJT°k]KyZUbhgjRJ`VhpHo[KyV?WYXBVhW]ZUKJTk]KJTk]i.RJ`UKJplZUT
pHi ?KJVhW]X.apMb?WHZU`UKh?pHb?WHT"k]R[p]iTUTUb?p2T$WHp]KS`UK[gVdZUi blpy¤YW]i2nKJ`I(K[ZakHKz?Vh`VhplZUij`Jg bl`UT"k2W(`V8p]KI(KJplZ[
gV(ZU`VhpHT^b?`IMVdZUi blpobl`U`UKJo[Z^Kk]KJTKplZ^ijZ^RJTmVhHTUZU`VdijZ^KTKpKJplZ^ijZ^RTob?p2o[`UG[Z^KT[
q« ~} © P°V8p]KJI(Kp?ZkVh`oCF]ijZ^KoZUW2`^KT[7EbhgjRJ`VhpHo[KyV?WYX¢VhWHZ^KJTJfYnRJo[i®o[VdZUi blpHTOb?`I(K[gjg KT[
`UoCFHi ZUKJoZWH`UKJTgjbhzhioijK[gjgjKJTJ
B a#
fYbdZVh`UKk]K[?K[gjb?nHI(Kp?Zy2Kob?I(KTK[XYZ`^KI(K[gj\kHi8o[WHg ZMVhTyk]i.KJ`UKJplZ VhTnKJoZT*Khz2
V,Vhi gVh]ijgji Z\?`^KJg iVhHi gji Z\?TUKJoJWH`^ijZ\hK[ZoOiplZ^KJ`^KJ`UKMi ZFZUF]K "!$#%V?TUnKJo[ZUTbh ZF]KTUbdZVh`UK
*i*Kh5ZF]KmTn2Koi oSnHWH`nb?TUKSZUFHVhZ$ZUFHK°TUbdZVh`UKTUKJ`UhKTCEF]K°T^bhZ V?`^Kk]KT^ijz?p]K`"iTaoblpY`Ub?plZ^KkyijZUF
pYWHI(K`^blWHTnH`^bl]gjKJIMT SF]KJpZU`U\Yijp]zMZUbM`UK®p]KT^blIyKVh2T^Z`UV?oZTUnKJo[ioJVdZUi blpHT ijplZ^bV( K[gjgb?`Uz?VhpHi'&JKJk
TUbdZVh`UKTUZU`WHoZWH`^K?bl`mSFHKJp Z`^\Yip]z8Z^bijp2ob?`nb?`VdZ^KKX]ijTUZ^ip]zT^b?gjW]ZUi blpHTSiplZ^bV8p]K[VhnHn]gjio[VdZUi blp
`VhI(KJbl`U¡® aIMn]g b\Yip]zZUF]KnH`Uijp2oin]g K(bd)( *,+.-/012. 34+/*5ijpvb?`k]KJ`mZ^bijp2k]KJnKJpHkHKJplZ^gj\
V?pHVdgj\$&[KV?pHk¢WHp2k]KJ`T^ZVhpHkBZF]KMIW]ZWHVdgijplZUKJ`^KJ`UKJpHo[KJTSbh$ZUF]K(Vh`Ui blWHTSTUbdZVh`UKVhTnKJoZT[.FHV?T°K[Kp
kHb?WH]ZUKJk T^ipHoKZUFHKipHk]Kn2KpHk]KpHoKVhTTWHIMn]Z^ijb?p;kHblKTBp]bhZ VdgjV,\YTF]bhgk _"V?`^ZUijoJW]gjV?`^gj\hmijp ZUF]K
kHb?IMVdip bhSVhW]gjZMZ^b?g K`UV?p?ZMTUbdZVh`UKh$Vvg b?Z(bhmK.b?`UZFHVhTMK[Kp IMVhkHKZUbvik]KJplZUi\ VvpYWHIy2K`ybh
V?HTUZU`VhoZUi blpHT8ZFHVdZo[V?n]ZUWH`UKZF]KijIMnb?`UZUVhplZT^bhZ V?`^Kn2`^bln2K`^ZUi KTVhp2k TWHnHnH`UKJTT8ZF]Kvi``^KJg KJ,V?plZ
kHK[ZUVhi gTijZUFB`^KTUnKJo[ZZ^bZUFHKVhW]gjZZ^b?g K`UV?pHoKT^bhZ V?`^KnH`Ub?nKJ`UZ^ijKJT6K?z$T^KJK7t8VhpHk7 L98
EF]K(b]o[W2T°bhaZUFHijTnHV?n2K`OijTOZUFHKMV?pHVdgj\]T^iT°bd$V?W]g ZZUbhgjKJ`VhpHo[KyTUbdZVh`UKnH`Ub?nKJ`UZ^ijKJTJ7VhpHkZUF]KJij`
ipHo[b?`n2bl`UVhZ^ijb?pip(ZUF]KSk]KTUoJ`^in]ZUi blpbh.VTUbdZVh`UK V?`UoCF]ijZ^KoZWH`^K? "X]iT^ZUijpHzbl`U¡ip(ZUF]K2KJgjk(bhV?W]g Z
ZUbhgjKJ`VhplZ7TUbdZVh`UKZUKJTUZ^i 2KJTZUFHVhZ7ZUFHKaT^\]TUZ^KI KJFHV,Yijb?`ipZUFHKanH`UKJTUKJpHo[K"bdYVdijgjW2`^KT.b?`IMTl\mijZUTbSp
VT^KnHVh`VdZUKk]blI(VhijpbdTUbdZVh`UKo[b?pHo[KJn]ZUi blp¢VhpHkk]KJTUi zlp plW2IKJ`°bd$Vhi gWH`UKyTUKJIMVhplZ^io[TOFHV,?K
K[KpMk]KpHKJk(Z^bk]KTUoJ`^iK ZF]KSnb?TT^i]gjKVhi gWH`UKSI(bYkHKJT5bdVT^bhZ V?`^K?dVhpHkMVOik]KS`UV?p]zhK bd.zhKp]KJ`Uio
V?W]gjZZUbhgjKJ`VhpHo[KZUKJoCFHpHij¤YW]KT"FHV,hK2KJKJpMk]KJhK[gjb?nKJkijp2k]KJnKJpHkHKJplZ^gj\`Ub?IqTUb?I(KTUnKJo[i®oVhnHn]gjio[VdZUi blp
kHb?IMVdip5EF]KSoblpHT^K¤YW]KJplZ"n]gWH`UVhg ijZ\bh.I(KoCFHVhp]iTI(T"n2`^bYik]ijpHz°V?W]gjZ$Z^b?g K`UV?pHoK?d`^KpHk]KJ`T$F]bln2KJg KTUT
V?p KXHFHV?WHTUZ^ijhKyTUKJV?`UoCFBnKJ`^b?`I(KJk¢l\¢FYWHIMVhpHTmb?`°ZUFHKV?W]g ZOZ^b?g K`UV?plZmI(KJoCFHV?p]ijTI ZUFHVhZOKJTUZ°2ZUT
V¢zhijhKJpV?nHn]gjijoJVdZUi blp ¥ep Vhk2k]i ZUi blp5i ZF]b?WHZyVo[b?IMI(b?pHV?T^iTZUbvWHpHkHKJ`n]ijp ZUF]KijplZ^KJz?`VdZUi blpvbh
ZF]K(VhW]gjZZ^b?g K`UV?pHoKMnH`Ub?nKJ`UZ^ijKJTijZUFvbhZF]KJ`TUbdZVh`UK(V?TUnKJo[ZUTJ7hK`^i \YijpHzZF]K8obl`U`UKJo[ZUp]KTUT°bdZUF]K
`UKJTW]gjZ^ip]zT^bhZ V?`^KO2KoblIyKTiI(nb?TTUij]gjKh
¯b?TUZ^KJ`UKJk l\ZUF]KyVb?`UKJI(Kp?ZUi blp]KJkV?oZUTJ®b?WH`S`UKJTUKJV?`UoCFBVhijIMTSVhZmnH`Ublik]ip]z8I(KJV?pHTSZUbTUW2nHn2bl`^Z
ZF]KvTU\]T^ZUKJIMVdZUijovVhpHVhg \]TUijT8bdVhWHg ZZ^b?g K`UV?pHoKTUbdZVh`UK¢nH`Ub?nKJ`UZ^ijKJTJSVhpHk;ZUF]K`^KVhTUb?p]ip]zblp ZUF]K
o[b?``^KoZp]KJTTmbhZF]K[i`ijplZUK[z?`VdZUi blp¢ijZUF]ipVTUbdZVh`UKMVh`oCF]i ZUKJo[ZUWH`UKhy£vK8k]bBp]b?ZT^KJKJ¡BZ^b nH`UbYijkHK
TUb?I(Kgjijp]zlW]iT^ZUijoTWHnHnb?`UZ5b?`5ZF]Kmk]KogVh`VdZ^ijhKk]KTUoJ`^in]Z^ijb?p(bh®ZF]KVhW]gjZ"Z^b?g K`UV?pHoKTUbdZVh`UK V?TUnKJo[ZUT
VhZOkHi.KJ`UKJplZk]K[?K[gjb?nHI(KJplZT^ZVdz?KJTJ.pHb?`°Z^bBnH`^blI(bhZ^KMTUb?I(KgjKX]iob?pbdazl`UV?nHF]ioZUKJ`I(TOZFHVdZOblW]gk
V?oijg ijZUVhZ^KZUFHK zl`UV?nHF]io[Vhgl`UKJnH`UKJTUKJplZVdZ^ijb?pbd®`UK[gVdZUi blpHTVhI(b?p]zTUbdZVh`UKaKJplZUi ZUi KT5bdKVhoCFyT^ZVdzhK?;:OWH`
n2`^iIMVh`U\I(bhZUi VdZUi blpBijT°Z^b`^KJg ijK[?KZUF]K(T^bhZ V?`^Kk]KT^ijz?pHKJ``Ub?IZUFHKyHWH`k]KpBbda`UKp]ip]zl\BFHVhp2k
ZF]KVh2T^Z`UV?oZT^bhZ V?`^KTn2Koi o[VhZ^ijb?pHTipb?`k]KJ`ZUbMb?]ZVdipVo[b?pHoJ`^KJZ^KTU\YTUZ^KI2VhpHkblWH`b?YceKoZUi ?K
iT Z^bnH`UbYijk]KOVbl`UIMVhg`VhI(KJbl`U¡yb?` ZF]KTUnKJo[ioJVdZUi blp8bdVhW]gjZZ^b?g K`UV?pHoKOT^bhZ V?`^KOnH`^bln2K`^ZUi KT[
SFHijoCFW]g 2g gTZF]Kbhgjg bip]zo[`UijZ^KJ`UiV/<
Lh¥ZyiT(nH`^KoiT^KKJp]blW]z?FTUbvV?TZ^bVdgjg b ZF]KV?o[o[W2`UVhZ^K8K[X]n2`^KTUTUi blpbdV?W]g ZyZ^b?g K`UV?p?ZynH`^bln2K`e
Z^ijKJTJSF]ijg KVhZ8ZUFHKTUV?I(K¢Z^iI(K¢i ZTUF]blW]gk 2K¢z?KJp]K`^ioBKJpHb?W]zlF TUb V?T8p]bhZZ^b `UKJTUZU`Uijo[Z8ZUF]K
ijp2k]KJnKJpHkHKJpHo[Kbd5ZUF]KVhg z?b?`Ui ZFHI(ijoOT^bhZ V?`^KVhTnKJoZT[
= ¥Z5ijT5`UijoCFKp]b?WHz?FTUb°V?TZ^bVdgjg bZF]Kk]KJkHW2oZ^ijb?pbdn2`^bln2K`^ZUi KTK¤lWHi VdgjKJp2oK b?`ob?IMnHVhZ^i]ijg ijZ\h
sH¥ZSTUW2nHn2bl`^ZTI(KJVhp2TZUFHVhZz?WHV?`UV?p?ZUK[KOZUF]K`UK®p]KJI(KJplZobl`U`UKJo[ZUp]KTUT SF]ioCFB`^KnH`UKJTUKJplZUTV(ZU`VhpY
T^ijZ^ijb?p(`Ub?I VTUbdZVh`UKSk]K[?K[gjb?nHI(Kp?Z$TUZUVhzhKSZUbZUFHK°p]K[XYZab?p]K?¥ZTUF]blW]gkVdgT^bK°nb?TT^i]gjKSZ^b
WHTUKSZUF]KT^K°IyKVhpHTaijpMZF]Km`UK[?KJ`T^KTUKJpHTUKhlZ^bik]KJplZUi\MZUFHKmVhHTUZU`Vho[Z$TUnKJo[i®o[VdZUi blpHT5`Ub?ISF]ioCF
V(zhijhKJpnH`Ub?nKJ`UZ\8iTk]KJ`Ui ?KJk
EF]K8`UKJIMVhijpHkHKJ`bd ZUF]iTnHV?n2K`ijTT^Z`UWHo[ZUWH`UKJkVhTOb?g gjbST<OipZUF]K8pHKX]ZT^KoZUi blp KnH`^KT^KplZV
gV,\hK`^Kkk]KJo[b?IMn2blT^ijZ^ijb?pbhSZUF]KT^bhZ V?`^K8kHK[hKJg blnHI(KJplZnH`Ub]oKTUTZUFHVhZynH`UbYijk]KTVhp ijpHTUijz?FlZ`Ub?I
kHi.KJ`UKJplZSYijK[Snbhip?ZTSblpZF]KyV?pHVdgj\]T^iTbh5ZF]KV?W]g Z°Z^b?g K`UV?pHoKTUbdZVh`UKnH`^bln2K`^ZUi KT[ ¥epflKoZ^ijb?p s
KMk]KpHKZUF]K(b?`IMVdg`VhI(K[ b?`¡ZUFHVhZTWHnHnb?`UZUTZF]KTUnKJo[i®o[VdZUi blpbhaV?W]g ZZUbhgjKJ`VhpHo[K(TUbdZVh`UK
n2`^bln2K`^ZUi KT[®ZUF]K`UKJV?T^blp]ijpHzb?p¢ZF]KMob?``UKJoZp]KJTTSbh$ZUF]KJij``UKpHKJI(KJplZUTJVhpHkZUF]KMk]KkHWHoZUi blp¢bhaZUF]K
n2`^bln2K`^ZUi KTSbd$ZF]K[i`Oob?IMnb?TUi ZUi blpHTJm¥epfYKJoZUi blp 9 Kyn2`^bln2blT^KVogVhTT^i o[VhZ^ijb?p ToCF]KJIMVHVhTUKJkBblp
ZF]KnH`UK[Yijb?WHTUg \ijplZU`Ub]kHWHo[KJkb?`I(Vhg`VhI(K[ b?`¡®lSFHijoCFb?`Uz?V?p]i&[KJTZUFHKVhW]gjZZ^b?g K`UV?pHoKnH`Ub?nKJ`UZ^ijKJT
ipVV,\yZFHVdZVdgjg bST"ZF]K[i` T^\]TUZ^KJIMVhZ^ioVhpHkK[8oijKJplZa`UK[ZU`UijK[Vdg2k2WH`^ip]zVTUnKJo[ioJVdZUi blp`^K[p]KJI(Kp?Z
n2`^b]oKTUTJ7EF]Kan2`UV?oZ^io[VhgdWHTUK"bd]ZUF]KogVhTT^i o[VhZ^ijb?pOTUoCFHKJIMV ijTk]ijTo[W2TUTUKJk°ijpfYKJoZUi blpt] ob?IMnHV?`^iTUb?p
ijZUF`UK[gVdZ^Kk8 b?`¡MijTn2`^KT^Kp?ZUKJkijp flKJo[Z^ijb?p HV?pHkZF]KnHVhnKJ`o[b?pHo[gjWHkHKJTijZUFV(2`^ijK5TUWHIMIMVh`U\h
Vk]ijTo[W2TUTUi blpBb?p ZF]Kbl`^ijzhipHVhg ijZ\bh$b?WH`°ob?plZ`^iHW]ZUi blpV?pHk¢Vn2`^KT^Kp?ZVdZUi blpbhao[WH``UKJplZS b?`¡Vhp2k
bln2KpiTTUW]KT[
M S y
%
E`Vhk]ijZ^ijb?pHVhg gj\h2ZUF]KTUbdZVh`UKk]KJhK[gjb?n2IyKplZSnH`^b]o[KJkHWH`UKFHV?TS2KJKJp¢kHKJoblIMn2blT^KkiplZ^b8ZF]Kb?g gjbijpHz
TUZUVhzhKT<S`UKJ¤YW]i`^KI(KJplZUTJ®TnKJoi oJVdZ^ijb?p2T[k]KT^ijz?p7o[b]k]ijpHz2.Z^KT^ZUijp]z7VhpHkI(VhijplZUKJpHV?pHoK?O¥epvZUFHijTTUKJoC
ZUi blp KSijplZ`^b]kHWHo[KmVkHi.KJ`UKJplZkHKJoblIMn2blT^ijZ^ijb?pMZFHVdZijT 2KJZ^ZUKJ` TUW]ijZ^KkMb?`aZUF]KOVhpHVhg \]TUijTabdZUFHKmV?W]g Z
ZUbhgjKJ`VhpHo[KTUbdZVh`UKnH`Ub?nKJ`UZ^ijKJTJ EF]KBnH`Ub?nb?TUKJk k]KoblI(nb?TUijZ^ijb?p `UKKJoZT(ZUF]K TWHo[o[KJTT^ijhK`^K[p]K
I(Kp?ZTbdZUF]KV?HT^Z`UV?oZVhpHkIMVhoJ`^blTUo[b?n]ioSYijK[ blpZF]KOVhW]gjZZ^b?g K`UV?pHoKTUbdZVh`UK°nH`Ub?nKJ`UZ^ijKJTJYijplZ^b
VIyio[`Ub?Tobln]ioVhpHk¢K[gVhb?`VdZ^Kk k]KJTo[`Uin]Z^ijb?pBbh$ZUF]K(T^bhZ V?`^KKJg KI(KJplZUT°ZUFHVhZ°V?o[oblIMn]g iTF V8zhijhKp
V?W]gjZZ^bhgjKJ`VhplZOWHpHo[Z^ijb?pHVhg ijZ\hmbhZUijo[KMZUFHVhZZUF]K8n2`^bln2blT^Kkvk]KJhKJg blnHI(KJplZk]KJo[b?IMn2blT^ijZ^ijb?pviToblI
nHg KIyKplZUVh`U\MZ^b(ZUF]KZ`UV?k]i ZUi blpHVdg®b?pHKO`VdZF]KJ`ZUFHV?pV?pVhg ZUKJ`pHVdZUi ?KhYVhpHki ZnKJ`IyijZUT ZF]Kk]KJTUi zlp]KJ`Z^b
b]oJWHTb?pZUFHKVhW]gjZZ^b?g K`UV?pHoKVhTn2KoZTbdTUbdZVh`UKk]K[?K[gjb?nHI(KJplZJ
V?o[`Ub?Tobln]ijoJVdgjg \?2ZF]K(kHK[hKJg blnHI(KJplZObd"VhWHg ZOZ^b?g K`UV?p?ZOT^bhZ V?`^KyT^ZVh`UZUTO?\¢TnKJoi \YijpHzZUFHKMTUK
IMV?p?ZUijoJTbd]ZF]KaTUZUVdZUKJTZFHVdZTUF]blW]gk2Ka`UKJV?oCF]KJkVdZ^KJ`7ZUF]K$b]oJo[WH``^KpHoK"bhYVVdijgjWH`UKhEF]KJTUKaTUKJIMVhplZ^io[T
`UKK`ijpz?KJp]K`UVhg"Z^b ZF]K`UK[gVdZ^ijb?pvbdZF]KTUZUVdZUK8VZUKJ`ZF]KMVdijgjW2`^K?ijZUFTUb?I(K8obl`U`UKJo[ZT^ZVdZ^KZFHVdZ
oJVhp2K8`UKJV?oCF]KJkl\¢ZUFHKT^bhZ V?`^K?y¯b?`K[X]V?IMn]g K?ZF]K3 ,+,T^KI(V?plZ^io[To[V?pvK8k]K[p]KJkV?TZUF]K
o[b?pHTUZU`VdiplZ"ZUFHVhZaZF]K°TUZUVhZ^K°VdZ^K`$ZUFHKmVhi gWH`UKmTUFHb?W]gk2KVTWHHTUK[Zbd7T^blI(K°TUZUVdZUKmnH`UKJo[KJk]ip]zZF]KSVhi
gWH`UK i>K?aZUFHKWHpHoZUi blpHVdgjijZ\bdZUF]KyT^\]TUZ^KJI Iyijz?FlZSk]KJz?`Vhk]KHWHZSVdgjgVdijgjW2`^KK.KJo[ZUTSV?`^K`UKJI(bhKk
¥ep VTUijI(ijgjV?`V,\h5ZUF]KBTUKJIMVhplZ^io[Tbd ', BVhpHk + o[V?p K`UKJTn2KoZ^ijhKJg \k]K[p]Kk
V?T°`UKJV?oCF]ip]z8VTUZUVhZ^KyZUFHVhZOoJVhp¢K(`UKJV?oCF]KJk l\ TUb?I(KVhi gWH`UK>`^KJKKX]KJoJW]Z^ijb?p¢bdaZF]K(TUbdZVh`UK *i*Kh
Vhi gWH`UK°K ®KoZT V?`^K`UKJnHVhij`UKJk ClV?pHk`^KVhoCF]ip]zV(T^ZVdZUK°ZFHVdZipHogWHk]KTVyo[b?``^KoZTUZUVhZ^K%i>K?$VZUKJ` ZUF]K
Vhi gWH`UKZF]KJ`UKyTUZ^ijg g5K[XYiTUZUTOVnHV?`^Z°bd$ZF]K(TU\]T^ZUKJI ZUF2VdZob?``UKJoZUg \BnH`UbYijk]KTSZF]K(o[b?IMn]gjK[ZUK(TUbdZVh`UK
W2pHoZUi blpHVdgji Z\ CEF]Kb?`IMVdgji'&VdZUi blpbd®ZUF]KT^KT^KIMVhplZ^io[TiTz?i ?KJpijpZUF]Kp]K[XYZ"TUKJo[Z^ijb?pipZF]KWHnHnKJ`
n2Vh`UZ bhEVh]gjKLh
EF]KBIMVhoJ`^blTUo[b?n]ioTUnKJo[i®o[VdZUi blpHTybdVdijgWH`^KT^KIMVhplZ^io[T(TUFHb?W]gk K`UKpHKJkZUbnH`UbYijkHKI(b?`UK
ipYbl`UIMVdZUi blp Vhb?WHZyZF]Kn2`^bln2K`^ZUi KTbhSZUF]KB`^KVhoCF]Kk TUZUVdZUKh¯2bl`K[XHVhIMn]gjKh$ZF]KkHKJTUi zlp]KJ`(FHVhTyZ^b
kHijTUZ^ip]z?WHijTFBVhI(b?p]z(ZUFHK`^K[>ip]ijZ^iVdgji'&VdZUi blp8bd5ZUFHKT^\]TUZ^KJIHZF]K`UKJI(bVdgbd5ZUFHKnHVh`UZbd5ZUF]KTU\]T^ZUKJI
V ®KoZUKJk ?\ ZUF]KVdijgWH`^K?V?pHk ZF]K `^Kn]gVhoKI(KJplZybh°ZF]K¢V .KJo[Z^KJk nHV?`^ZMl\ Vob?``UKJoZyb?p]K? EFHijT
`UK®p]KJI(KJplZbdVdijgjW2`^KTUKJIMVhplZ^io[TVhZOZF]K8TUKJoblpHkkHK[hKJg blnHI(KJplZT^ZVdz?KhgjKJVhk2TZ^b oblpHT^Z`UVhijplZT°ZFHVdZ
z?i ?KVOT^Z`^ioZ"k]K[p]ijZ^ijb?pbdSF2VdZ5T^ZVdZ^KTF]b?W]gkK`^KVhoCF]KkV?T^Kkb?pZUF]iT"k]K®p]i ZUi blpdZF]Kk]KJTUi zlp]KJ`
F2VhT$ZUbTn2Koi \ ! ZUby`UKJVhoCF(ZFHVdZ T^ZVdZ^K? p]K[;`UK®p]KJI(KJplZ$ZVh¡hKJT$n]gVho[KhlZUFHVhZagjKJV?kHT$ZUbZUF]K°ZUF]i`k
kHK[hKJg blnHI(KJplZT^ZVdz?KhM¥epZUF]iTTUZUVhzhKhZUF]K8TU\]T^ZUKJI iTYi KJKkVhTVBT^KJZbdb?YceKoZT[V?pHkZUF]K8TUK[Zbh
blYceKJo[ZT^ZVdZUKJTbl`UIMTV-/ 1¢bdZF]KTU\YTUZ^KI TUZUVhZ^Khi>K?ZF]KJ`UKijTp]bTUZUVdZUK8TUF2Vh`Uijp]z K[Z K[Kp
V?pl\8ZbblYceKJo[ZUTJHVhpHkZF]KWHp]ijb?pbh5Vhg g7blYceKJo[ZST^ZVdZUKJTz?i ?KJTZUFHKT^\]TUZ^KI T^ZVdZUKh :O]ceKJoZTip?ZUKJ`Vho[Z
l\ nKJ`^b?`I(ijpHz¥ : V?oZUi blpHTVhTk]K[p]Kk l\ ZUF]K fY_ o[b?IMnHW]ZVdZUi blp I(b]k]KJg* EFHK zhb?VhgbdZUF]K
`UK®p]KJI(KJplZgjKJV?k]ip]z Z^b¢ZF]iTTUZUVdZUK8iTZ^bvk]KJo[b?IMn2blT^K8TU\]T^ZUKJI T^ZVdZUK8ijplZUb¢TUWH]4TUZUVhZ^KJTZUFHVhZo[V?p2K
IMV?nHn2Kk(b?plZ^bb?]ceKJoZT$Vhp2kyZUbijkHKJplZ^i \yZF]Kb?]ceKJoZ$V?oZUi blpHT5ZUFHVhZ$gjKJVhkyZ^bVTU\]T^ZUKJIT^ZVdZ^KSTVdZUijT^\YijpHz
ZF]KnH`UKJk]K[p]Kk8V?W]g ZZUbhgjKJ`VhpHo[KOo[b?pHTUZU`VdiplZUTJ
EF]K p]K[X]ZMTUZ^Kn ip ZF]K k]K[?K[gjb?nHI(Kp?Z(bd°VhW]gjZMZ^b?g K`UV?p?ZMTUbdZVh`UK8ijTMZUbb?W]ZUg ip]Ki ZTVhHTUZU`Vho[Z
V?`UoCFHi ZUKJoZWH`UKhbl`U`UbijpHzZUF]KMoblpHoKn]ZUTm`^blI ZUF]Ky2K[gk¢bhTUbdZVh`UKVh`oCF]i ZUKJo[ZUWH`UKJTJZF]KMk]KJTUi zlp]KJ`
pHK[KJk2TZUb Tn2Koi \ ZUF]KT^\]TUZ^KJI V?TV T^KJZbd # -/3+, *8iplZ^KJ`oblpHp]KoZ^Kk l\ +*C EF]K
blYceKJo[Z°TUZUVhZ^KJTOVhp2k¢Vho[Z^ijb?pHTmZUFHVhZOFHV,?KK[KJpvnH`UK[Yi blWHTUg \ijkHKJplZ^i 2KJk7.IyWHTUZOKyV?TUTUb]oiVdZ^KkBZ^bBoblI
nb?pHKJplZUT VhpHkoblpHp]KJo[Z^bl`UTabdZF]KOTUbdZVh`UKmV?`UoCF]ijZ^KoZWH`^Kmijpb?`k]KJ`aZ^b(KXHnH`UKJTT$ZUFHK[i`aV?W]gjZZUbhgjKJ`VhpHo[K
n2`^bln2K`^ZUi KT[EF]K8`^KTUWHg ZiTV?pV?HTUZU`VhoZk]KTUoJ`^in]ZUi blpvbhSVVhW]gjZZ^b?g K`UV?plZTUbdZVh`UKVh`oCF]ijZ^KJo[ZUWH`UKh
agjV?2bl`UVhZ^ip]zBb?pZUF]K8VhW]gjZZ^b?g K`UV?pHoKnH`Ub?nKJ`UZ^ijKJTV?TUTUijz?p]KkZUb¢ob?IMnb?p]KplZUTV?pHkob?p2p]KJo[Z^b?`Tijg g
`UKJTW]gjZmipV?p]bhZF]KJ`°`^K[p]KJI(Kp?Z°g KVhk]ip]zZ^bZUF]KMk]KJo[b?IMnb?TUi ZUi blpBbdaZF]K(V?`UoCFHi ZUKJoZWH`VdgKplZ^ijZ^ijKJT°ijplZ^b
I(bl`^Ko[b?pHoJ`^KJZ^Kblp]KJTmZUFHVhZ°o[V?p 2K(k]i`^KoZ^gj\BI(V?nHnKJk blp?ZUbZUF]K(nH`UK[VdgjKJplZSblYceKJo[ZUTSbh$VVhWHg ZSZUbhgjK
`VhplZI(KJoCFHV?p]ijTI *Khz2MZUF]K8`UK[gjiVh]gjKH`^blVhkHoJVhTUZ°nH`UbhZUb]obhg>7ZF]K8`^Kn]gjijoJVdZ^ijb?pvIMVhpHVhzhKJ`JZUFHKhbhZUijpHz
I(KoCFHVhp]iTI]KJZUo
EF]KK[gVhb?`VdZ^KkkHKJTo[`Uijn]ZUi blpbd"V(VhW]gjZSZ^b?g K`UV?plZTUbdZVh`UKVh`oCF]i ZUKJo[ZUWH`UK`^KJhKJVhgjTZF]KTUbdZVh`UK
n2`^bln2K`^ZUi KTS`^KJgjVhZ^KkBZ^b8V?W]gjZmZ^b?g K`UV?pHoKV?TUnKJo[ZUTmbdaV8TU\]T^ZUKJI®2W]ZmgjKJV,?KJTSWHp2k]KpHKJk¢VplW2IKJ`Sbh
n2Vh`VhI(K[ZUKJ`TmipHk]iTUnKJp2TUV?]g Kyb?`OZF]Kob?p]2z?WH`VdZUi blpk]KJnHg b\]I(KJplZVhpHkobl`U`UKJo[ZSWHpHo[Z^ijb?p]ip]zBbd ZUF]K
o[b?``^KTUnb?p2k]ijpHzV?W]g ZmZ^bhgjKJ`VhplZSI(KJoCF2Vhp]iTUIfYWHoCFBnHVh`VhI(KJZ^KJ`TipHogWHk]KZF]Kk]KJz?`UK[Kbd$`UKJn]gjio[VdZUi blp
bl`"VOzhijhKJpVdijgjW2`^KnH`Ub?HV?]ijg ijZ\bd.ZUF]KSTUbdZVh`UKV?pHk(FHVh`k]Vh`UK o[b?pHTUZ^ijZUW]KplZUT5bd.VT^\]TUZ^KJIhV?pHk(ZUF]K
ZWHp]ip]z(bd7ZUFHK°ZUijI(K[blW]Zn2K`^ijb]kHT$bl`TnKJoi oOp]K[Z b?`¡(oCFHVh`Vho[Z^KJ`UiT^ZUijoJT$VhpHkTUnKJo[i®omgjb?V?kY4n2VdZ^ZUKJ`pHTJ
EFHKJTUK8nHVh`VhI(K[ZUKJ`TFHV,hKMZ^b¢Kk]KJZ^K`UI(ip]KJkkHWH`Uip]z ZUF]KnH`^blHVhHi gjijTUZ^ioMVhpHVhg \]TUijTbh ZF]KTUbdZVh`UK
ZFHVdZMZVh¡dKTMn]gjV?oKBip VTUKJnHV?`UVhZ^KBk]K[?K[gjb?nHI(KJplZMT^ZVdz?Kh EF]KpHVdgSTUbdZVh`UKkHK[hKJg blnHI(KJplZT^ZVdz?K
o[b?pHTUiT^ZT"bd.S`^ijZ^ip]zZF]Kmo[bYkHKZUFHVhZaobl`U`UKJTn2blpHkHT5ZUbZUF]KmTnKJoi oJVdZ^ijb?p`UKJTW]gjZ^ip]z`Ub?IqZF]KmnH`UK[Yijb?WHT
TUZUVhzhKT bl`aTUbdZVh`UKSo[`UKJVdZUKJk(`Ub?IZUF]KOTUoJ`UVhZUoCF Chbl`aVhTTUKJIHg ip]zZUFHKmKX]iT^ZUijpHzn]ijKJoKTabh7ob]k]KmZFHVdZ
TVdZUijT^\8ZF]KTUnKJo[i®o[VdZUi blpo[b?pHTUZU`VdiplZUT6bl`T^bhZ V?`^K`UKJWHTUK C"¥epZF]K`^KIMVdipHk]KJ`bhZF]ijTmnHVhnKJ`J]K
kHbMpHbhZSVhk2kH`^KTUT iTUTW]KT`^KJgjVhZ^KJkZ^bMZF]KgjV?T^ZZ bT^bhZ V?`^Kk]K[?K[gjb?nHI(Kp?ZV?TUnKJo[ZUTJ
# #[
C M #%
EbKKJpHKo[ijVhgabl`ZF]Kk]KT^ijz?pHKJ`JZF]KBk]KJo[b?IMn2blT^ijZ^ijb?pbhSZUF]KT^bhZ V?`^Kk]K[?K[gjb?nHI(KJplZn2`^b]oKTUT
n2`^KT^Kp?ZUKJkyijp(ZF]KSnH`UK[Yi blWHT"TUKJoZUi blpyIyWHTUZ$2KmW2pHk]KJ`n]ipHp]Kk(l\VObl`UIMVhgY`UV?IyKJbl`U¡®,SF]ioCFMTUF]blW]gk
TVdZUijT^\ZF]Kb?g gjbijpHzob?p2k]i ZUi blpHT<ijZTF]b?W]gkM2KmKJVhTU\ZUbWHTUKhlVhpHkMijZaTF]b?W]gkM2K°KXHnH`UKJTT^ijhKKp]b?W]zlF
ZUb8o[V?n]ZUWH`UKV]ijz8I(Vdceb?`Ui Z\bh"ZUF]KnH`Ub?nKJ`UZ^ijKJT`UK[gVdZUKJkZ^b(Vhi gWH`UKT^KI(V?plZ^io[Tbd5ZUFHKT^bhZ V?`^K?"£vK
F2V,hKaoCF]blT^KpZ^bOWHT^KnH`UKJk]io[VhZ^K$gjbhz?ijoaKX]Z^KpHk]Kki ZFZF]K -0++ +,3+]ipHV?`^\b?nKJ`VdZUb?` *b?`Ui z?ijp2Vdgjg \
iplZU`Ub]kHWHoKk ijp 7Lu 8"CmSF]ioCF;k]K[p]KTV n2Vh`UZ^iVdgmbl`UkHKJ`ip SF]ioCF;nH`UKJk]io[VhZ^KTVh`UK¢?KJ`Ui2Kk EF]K
K[X]Z^KJp2k]KJknH`UKJk]io[VhZ^KMg b?zhioyn2`^bYik]KJTOZUFHKMkHKJTUi zlp]KJ`OijZUFZUF]KI(KJV?pHTZ^b o[b?IHijp]KMZF]Kob?p2T^Z`UVhijplZUT
blpZF]KT^\]TUZ^KI T^ZVdZUKJT ZUFHVhZSTUFHb?W]gkK`^KVhoCF]KkVdZ^KJ`VVdijgWH`^KijZUFZUF]Kn2Vh`UZ^iVdg.b?`k]KJ` bhVho[Z^ijb?pHT
ZFHVdZ(TUFHb?W]gk KnKJ`^b?`I(KJkZUbv`UKJVhoCFZF]Kz?i ?KJp TUZUVhZ^K?mKpHoK?$ZUFHKk]KT^ijz?p]K`bl]ZUVhijp2TV¢z?g blHVdg
kHKJTo[`Uijn]ZUi blp¢bh TU\YTUZ^KIT°VhWHg ZZ^b?g K`UV?pHoK(nH`Ub?nKJ`UZ^ijKJTJ72b?ZUFvijpvZ^K`UIMTbdT^ZVdZUK(TUKJIMVhplZUijoJTOVdZ^K`OV
Vhi gWH`UKVhpHkbd"Vho[Z^ijb?pHTW2pHk]KJ`UZUV?¡dKpZUb8`^KVhoCFZUFHVhZST^ZVdZ^K?aEF]iTSk]KTUoJ`^in]Z^ijb?pb?`IMTV]gW]KJnH`Uip?Zbh
ZF]KV?W]g ZZUbhgjKJ`VhpHo[KIyKoCFHVhpHijTIZFHVdZTF]blW]gjkKWHTUKJkVhp2koJVhpK8ijplZUK[z?`VdZUKJkvijpZF]KTUbdZVh`UK
V?`UoCFHi ZUKJoZWH`UK°bhZF]KT^\]TUZ^KI ijpBV(V,\8T^iI(i gVh`ZUb(ZF]Kb?pHKkHKJTo[`UijKJkip7 84
EbKXHnH`UKJTTZUF]KV?W]g Z"ZUbhgjKJ`VhpHo[KT^bhZ V?`^KnH`Ub?nKJ`UZ^ijKJTJdi Z$TWY8oKT5Z^bk]K[p]KZF]KSHVhTUKnH`UKJk]io[VhZ^KJT
ZFHVdZ°b?`IMVdgjg \ k]KTUoJ`^iKyTU\YTUZ^KI T^ZVdZUKJTOVhpHk¢V?oZUi blpHTmijZUF`UKJTn2KoZmZUbVhi gWH`UKJTJ£vKMH`Uijp]zZ^bZUF]K
`UKJV?k]KJ`JT8VdZUZ^KJplZUi blp ZUFHVhZZF]ijTTUK[Z8bhHVhTUKnH`UKJk]io[VhZ^KT8iTp]b?ZWHpHij¤YW]KOZF]KvkHKJTUi zlp]KJ`ijT`^KJK¢Z^b
oCFHblblT^KZUF]KHVhTUKnH`UKJk]io[VhZ^KT8ZUF2VdZVhoijgji ZVdZ^KF]iT`UKJV?T^blp]ijpHz2 ¥ep ZF]Kv`UKJIMVdipHk]K`8bhZUF]KnHVhnKJ`
KWHT^KOZUFHK°b?g gjbip]zyo[b?IMnHW]ZVdZ^ijb?pI(bYkHK[g<$VyTU\]T^ZUKJI TUZUVdZUK°iTVyIMV?nHn]ip]zMbdVh`UiVh]gjKJTZ^b(VdgW]KJT
V?o[o[b?`k]ijpHz°ZUbZUF]KSTUbdZVh`UK TnKJoi oJVdZ^ijb?p2T[5EF]KVdgW]KbdT^blI(K,V?`^iVhHg KToJVhpMKSWHpHk]K[p]KJk(ipMZUF]K
TnKJoi oJVdZ^ijb?p2T[dHWHZSFHKJpZF]KVdgW]KJTbdb?p]K b?`I(b?`UKVh`UiVh]gjKJTgjV,\blW]ZUTUijkHKZF]K`UV?p]zhKzhijhKJpijpyZUF]K
TnKJoi oJVdZ^ijb?p2T[]VyVdijgjW2`^KOijTTVdik8ZUbMbYoJo[WH`J"EF]KT^\]TUZ^KI T^ZVdZ^KiT -1 3+ ?\ZF]KT^ZVdZUKJTbdZUF]K
blYceKJo[ZUTSo[b?pHTUiT^ZUijp]zZUF]KTU\]T^ZUKJIV?pHk TUZUVdZUKZU`Vhp2T^ijZ^ijb?pHTmVh`UKZUF]K(`^KTUW]gjZSbh5ZF]KV?oZ^ijb?p2TmnKJ`^b?`IyKk
l\ZUF]Kb?YceKoZUTJ¢Ebk]KJpHbhZ^KnH`^Kk]io[VdZUKJTblpT^ZVdZUKJTJ5V?oZUi blpHTVhp2kZUF]KJij`yijplZUKJ`n]gjV,\?ZF]K8b?g gjbijpHz
pHbhZUVhZ^ijb?pHTmVh`UKW2T^Kk <2nH`UijI(KJkBbl` bhgjg b KJkBl\VTWHHTo[`Uin]ZSVdgW]Khk]KJp]b?Z^KTSZUFHKT^\]TUZ^KI TUZUVdZUK
gjb KJ`^4oJVhTUK zl`^KJKJ¡yg KJZ^ZUKJ`Tk]Kp]bhZUKmblYceKJo[ZUT Khz2$]K[Zo]V?pHkb?]ceKJoZ T^ZVdZUKJT Vh`UKmk]KJpHbhZ^Kkl\MZUF]K
blYceKJo[ZpHV?I(K)SFHijoCFo[Vhp2Kp]K[z?g KoZUKJkSF]Kp8ijZiTb?lYi blWHT$ipVzhijhKJpob?plZUKX]Z5bhgjg b KJk8l\
n2`^iI(KJkb?` bhgjgjbKkl\VMTWHHTo[`Uijn]ZVdgW]K*Khz2^HK[ZoCfl\]T^ZUKJI V?pHkb?YceKoZSVho[Z^ijb?pHT
V?`^K S`Ui ZUZ^KJpyipyijZUVhg io[T *Khz2 # -//0YVhpHkyZUF]KSo[b?``^KTUnb?p2k]ijpHz°nH`UKJk]io[VhZ^K hK`^i 2KJkySF]Kp
ZF]KVho[Z^ijb?piT`^KVdgji'&JKJkiTS`Ui ZUZ^KJpijpTI(Vhg g o[VhnHi ZVdgT *Khz2! #"%$'&(?)/ ¢b?`UK[b?KJ`JhSF]Kp
pHbhZ5bhZF]KJ`UijTUKT^ZVdZ^Kkh KS`^ijZ^K# Z^bk]Kp]bhZUK ZF]Kb?]ceKJoZ"TUZUVhZ^K2K[b?`UKKX]KJoJW]Z^ip]zVOzhijhKJpyVho[Z^ijb?p
V?pHk*,+2ZUb(k]Kp]bhZUKmZF]KT^ZVdZ^KO`^KVhoCF]KkVZUKJ` ZUF]KOKX]Ko[W]ZUi blpbdZF]KOzhijhKJpVhoZUi blp VhTUKJkblpZUF]KT^K
pHbhZUVhZ^ijb?pHTJ] KkHKp]KZF]Kbhgjgjbijp]zMnH`UKJk]io[VhZ^KT<
-/.
10>SF]ioCFiTZU`W]K8SFHKJpZUFHKTU\YTUZ^KI iTip TUZUVhZ^K2¢fYijI(ijgjV?`^gj\ Kk]K[p]K
.
#0$b?`
b?YceKoZSTUZUVhZ^KJTJ
-43
5768:9;<>=?<A@BhSF]ioCFMiT$ZU`W]KSSFHKJp8TUb?I(KSbh.ZF]KmV?`^iVh]gjKJT5bh7¯F2V,hKSK[KJpVhTT^ijz?p]Kk
VdgW]KJTp]bhZk]KpHKJk;l\ T^\]TUZ^KITTnKJoi oJVdZ^ijb?p2T[fliI(i gVh`Ugj\ Kvk]K[p]K
3
56!:9C;<>=yb?`
b?YceKoZVhi gWH`UKJTJ
-
EDFG( H ]SF]ioCFiTaZ`UW]K°SF]KJpZUF]K°b?YceKoZviT VhnHnKJV?`UT$b?`$ZF]K°`UTUZaZUijI(K°ijpZUF]KOT^\]TUZ^KJI
i ZFijp]ijZ^iVdgT^ZVdZ^K>H *i*KhJIKML
.
#0 NEDFG( H C
-4OP
G( CSF]ioCFiTZU`W]KSF]KpZUF]Kb?]ceKJoZ# ijT`UKJI(bhKk`Ub?I ZF]KTU\YTUZ^KI i>K?
IKQRML
OP
G(?); .
R10"
-4OP
"%$'&(?)/aSFHijoCFiTyZU`W]KSF]Kp ZF]KblYceKJo[ZM KXHnb?`UZUTZUbblYceKJo[ZS ZF]KijpYbl`e
IMVdZ^ijb?pT®SF]K`^KMijTOV(WHpHo[Z^ijb?p bh$ZUF]KblYceKJo[ZmTUZUVdZUKKb?`UKK[XYKo[W]ZUijpHz8ZUF]K +U-/
Vho[Z^ijb?p]i>K?WV
3
;),=ab?`TUb?I(KOWHpHo[Z^ijb?p
3
k]K[p]KkipZUF]KTU\]T^ZUKJI TnKJoi oJVdZ^ijb?p2T[
-
! #"%$'&(?)/YSF]ioCFyiT"Z`UW]KSFHKJp(ZUF]Kmb?YceKoZ `^KoKJi ?KJT5ZUFHKijpYbl`UIMVhZ^ijb?pWyT^Kp?Z
l\blYceKJo[Z,.SF]KJ`UKZUFHKyTUZUVdZUK ,+7bd$ZF]KblYceKJo[Z°VdZ^KJ`°KX]Ko[W]ZUijp]zZUF]K # -/5Vho[Z^ijb?p iTmV
WHpHo[Z^ijb?pbdaZF]KnH`UK[Yi blWHTT^ZVdZUKMV?pHk¢bhZF]KnHVh`VhI(K[ZUKJ` ®7i>K?W + V
; =Sb?`
T^blI(K°W2pHoZUi blp
k]KpHKJkijpZUFHKT^\]TUZ^KJITUnKJo[i®o[VdZUi blpHTJ
-
/) $CYSF]ijoCFMiT"Z`UW]KmSF]KJpMZF]KmTUZUVdZUK, +2`^KVhoCF]KkyVdZ^KJ`aZUF]KmKX]KJoJW]Z^ijb?p(bd ,
l\2?KJ`Ui2KT ZUF]KnH`UKJkHijoJVdZ^K
3
56!:9C;,+=C
OT^ip]zZF]K°V?2b?KSnH`UKJk]io[VhZ^KJTJh KmoJVhpz?i ?KZUF]KOVhHTUZU`Vho[ZaTUnKJo[i®o[VdZUi blpHTaV?pHkMZUFHK[i`a`UKp]KI(KJplZUT
bh®ZF]K . ,+ ' ®Vhp2k +, STUKJIMV?p?ZUijoJT"zhijhKpipYbl`UIMVdgjgj\ijpMZF]KSnH`UK[Yijb?WHT"TUKJo[Z^ijb?p
V?T5k]KJn]ioZUKJkyijpyZUFHKW2nHn2K`e7V?pHkZF]KI(ijkHkHg K[4nHV?`^ZTbd®EVhHg KOL `UKJTnKJoZUi ?K[gj\h¥epZF]KJTUK b?`IW]gVhTJZUF]K
pHbhZUVhZ^ijb?p k]Kp]bhZUKJTV(ob?``UKJoZ T^\]TUZ^KI KX]KJoJW]Z^ijb?p]i>Kh"Vyn2Vh`UZ^iVdgjg \bl`Uk]K`^Kk8TUK[Z bdTUZUVhZ^KTSFHKJ`UK
ZF]KnH`UKJkHijoJVdZ^K
3
56!:9C;,=SiTpHK[hK`hK`^i 2Kk'<`UKJnH`UKJTUKJplZUTZF]KTWHYT^ZVdZUKbdVhW]gjZ\I(V?nHn]ip]z?T
*i*Kh< VT
3
5768:9; =C' ;),=k]Kp]bhZUKJTZF]KVh`UijV?]g KTObd TUZUVhZ^KAi>K?ZUF]K
# bhZUF]KIMVhn2n]ijpHz$Vhp2k TU\YIy2b?g k]Kp]bhZUKJTZUFHKvbln2K`UVhZ^ijb?p;bhyTUK[ZBTUWHHZU`VhoZUi blp EF]K
gjb KJ`^4nHV?`^ZbhEVh]gjKL(ijplZ`^b]kHWHo[KJTOTUnKJo[i®o[VdZUi blp bdaVhW]gjZ°ZUbhgjKJ`VhpHo[KynH`Ub?nKJ`UZ^ijKJTOHV?T^Kk b?pvVhoZUi blp
n2`^Kk]ijoJVdZUKJTJSF]ijoCF Vh`UK¢ZUF]K`UKJTW]g ZbdZUFHKV?pHVdgj\]T^iTk]blp]K¢ip;ZF]KZF]ij`k;TUbdZVh`UKk]KJhK[gjb?n2IyKplZ
TUZUVhzhK?¥epZUF]KT^K°b?`IWHgjV?T[Y K°VhTTWHI(KOVVdijgjW2`^KOb]o[o[W2`U`UijpHzykHWH`Uip]zyZF]KOZU`VhpHTUi ZUi blp`Ub?I TUZUVhZ^KJ
ZUb T^ZVdZ^K* +VhpHkvKWHTUKMZUF]K8pHbhZUVhZ^ijb?p ! MZ^b¢k]Kp]bhZUK(ZF]Kip]i ZUijVhg i&JVhZ^ijb?pT^ZVdZUKbdZF]Kb?]ceKJoZ
*i*Kh IK .
#0
.
R! 0HV?pHk2 ++ZUb(kHKJp]b?Z^KT^blIyKOb?]ceKJoZTUZUVdZUK°b]oJo[WH``^ip]z(VZ^K`T^ZVdZ^K
+ i>K?
.
+R0
.
++R0
. ,+ " ; .
!0#
3
56!:9C;!==%$
;)KQ'& )( ; .
CE0 .
*&?0!=)# ; .
)(:0 .
CE0!=)# ;'& @B)( ==
" ; .
!0#
3
56!:9C;!==%$ ;)KQ'& ; . 80
.
'& 0!=+# ;'&,- ==
+, " ; .
0#
3
56!:9C; ==%$ ;)KQ &. ; .
0
.
& 0!=/#
;)KQ ( 0 1 ;2C .
10 .
0+$
.
10 .
( 0!==3#;) ( @B & ==
4
'+*5 - " . ,+,# ;*&,V 6<>=
4
0*0! " . ,+,# ;*&,V87=
+95 1;:+ " # ;)'& V/! =<?>*@AB@ IKQ
.
10 .
6 0E=
C " # ;)KQ)(
;. )(:0
.
CE0!=+# ;))(V/'& ==
D5FE " +, G# ;))(V *& =
+-' +# + " +, G# ;H ;8<>= @ '&I )(=
J $LK?
OM
D!N=OF" " 4
'+*5 -P#Q2 L3
56!:9C;8=R$
OP G( );
S
(C$ #UT " C,#Q2C WV?YXYZL
=
/) V YX[Z?\$ ;,++%V ,=
J $3]
O
"M
T O " + -' +# + Q#Q2CL;3
56!:9C;8= ED G( ;'+) R)([^8==Q# ;'+!" =_#
; .
R)([^G0
.
10E=
EVhHg KML <"¯®VdijgjW2`^KTUKJIMVhplZ^io[T`UK[gVdZUKJkZ^bfYVdK[Z\h VdijgjV?]ijg ijZ\hHV?pHkPSK[gjijV?]ijg ijZ\h
` ijhKp ZF]KVdb?`UKJI(KJplZ^ijb?pHKJk `UV?IyKJbl`U¡bl`ZUFHK b?`IMVdgKXHnH`UKJTTUi blp bhOZF]K VhWHg ZZUbhgjKJ`VhpHo[K
TUbdZVh`UKnH`Ub?nKJ`UZ^ijKJTJZUFHKMkHKJTUi zlp]KJ`Oo[V?p`UKJVhTUb?p¢b?p¢ZF]K[i`oblI(n2VdZ^i]ijg ijZ\h7V?pHkvb?p¢ZF]K[i`oblI]ipHV
ZUi blpHTJ \oblI]ip]ip]zBk]i.KJ`UKJplZnH`Ub?nKJ`UZ^ijKJTJZUF]Kk]KT^ijz?pHKJ`Ob?]ZVdipHTVB`^K[p]KJI(Kp?ZObd ZUF]KJij`ip]ijZ^iVdg
o[b?pHTUZU`VdiplZUTJhTUijpHo[KSZUFHK°oblI]ipHVhZ^ijb?pMo[V?p(K°TUK[KpVhT"ZF]K°TWHnKJ`n2blT^ijZ^ijb?p(bhpHK[;nH`Ub?nKJ`UZ^ijKJT"blpMZUF]K
K[X]ijTUZ^ip]zo[b?pHTUZU`VdiplZUT$`UK[gVdZUKJk(Z^bVhW]gjZ$Z^b?g K`UV?pHoK?EFHKJTUKm`^K[p]KIyKplZUTJ?blpHoKSnH`UbhKk(Z^byKmo[b?``^KoZ[
oJVhpKWHTUKJkV?pl\pYWHIy2K`bdZUijI(KJTyZ^bijpHkHijoJVdZ^KZ^b¢ZF]KkHKJTUi zlp]KJ`VvT^KJZbdSo[b?``^KoZ`UKp]KI(KJplZUT
bl`V(zhijhKJpVhWHg ZZUbhgjKJ`VhpHo[KTUbdZVh`UKnH`^bln2K`^Z\?5£vKKJgjV?2bl`UVhZ^Kb?pZUF]iTSW]ZUi gji&JVdZUi blpbd5ZUF]Kbl`UIMVdg
`VhI(KJbl`U¡(ipZF]Kp]K[XYZSTUKJo[Z^ijb?p
#[
"!# a%
EFHKa2KJgjkbd®KX]ijTUZ^ip]zmVhW]gjZ5Z^bhgjKJ`Vhp2oKaZUKJoCFHpHij¤YW]KT¡hK[KnHTK[XHnHVhpHkHijp]zOoblp?ZUijpYW]blWHTUg \?dVhpHkZUF]KJij`5nH`Ubhgji
K`UVhZ^ijb?pyijTaIyblT^Z$W2p]g i¡dKJg \yZ^bKSoKVhTUKJklT^ipHoKijZ"iT"ijp2T^ZUi zlVdZ^KkM2b?ZUFMl\ZUFHKmVhk]V?pHoKT5ijp(ZUFHKmVh`UKJV?T
bh5F2Vh`k] V?`^KVhp2kbln2K`UVhZ^ip]z8TU\YTUZ^KI TWHnHnb?`UZ[2V?pHkBl\ZUFHKijp2o[`UKJVhTUip]zVhnHn]gjio[VdZUi blp`UKJ¤YW]i`UKJI(KJplZUT
ipZ^b?g K`UVhZ^ip]zBVdijgWH`^KT[ ` ijhKJpZF]K8iIMIyKpHTUKpYWHIKJ`bdVhW]gjZZUbhgjKJ`VhplZI(KJoCFHV?p]ijTIMTVhp2kZUF]KJij`
o[b?IMn]gjKX]ijZ\h]ijZSijTSijpHkHijTn2KpHTVh]gjKh]`Ub?I ZUF]KTUZUV?pHkHnbhip?Zbh5TUbdZVh`UKob?``UKJoZp]KJTTVhpHkB`Ub?HW2T^Zp]KJTT[
ZUb `^KVhoCFvZUF]KMp2VdgaTUbdZVh`UKyk]KJhKJg blnHI(KJplZT^ZVdz?KyijZUFV ogjKJV?`VhpHkk]KJZUVdijgjKJkk]KJTo[`Uin]Z^ijb?pvbdZUF]K
V?W]gjZmZ^b?g K`UV?pHoKTUbdZVh`UKnH`Ub?nKJ`UZ^ijKJTJ¯2bl`SZUFHijTJ KypHK[KJkBZUbnH`UbYijkHKZUF]K(IyKVhpHTmZUFHVhZmijg gz?WHijk]K
ZF]KMk]KJTUi zlp]KJ`mijpv`^K[p]ip]zZF]KVhHTUZU`Vho[ZmoblpHTUZU`Vdip?ZTm`UK[gVdZUKJk ZUbV?W]g ZOZ^b?g K`UV?pHoKyT^bhZ V?`^KV?TUnKJo[ZUT
iplZ^bVhpKJgjV?2bl`UVhZ^KJkk]KTUoJ`^in]Z^ijb?pbd"nH`Ub?nKJ`UZ^ijKJTbhZF]KVhW]gjZZ^b?g K`UV?plZI(KoCFHVhp]iTI ZUF2VdZSTF]b?W]gkB2K
W2T^Kk
! #"$%'&(*)+%-,.&("0/1%'&2(%3
:OpHK V,\ZUbnH`^bYik]KZUF]KSkHKJTUij`UKJkyz?W]ikHV?pHoK b?`$ZUF]KSk]KT^ijz?pHKJ`JdijT$Z^boblWHn]gjKVzhijhKJpVhWHg Z"ZUbhgjKJ`VhpHo[K
n2`^bln2K`^Z\BijZUFVTUK[ZObdobl`U`UKJTn2blpHk]ip]zVhg ZUKJ`pHVdZUi ?K(`UKpHKJI(KJplZUTJ¯b?`OKXHVhIMn]gjKhZF]KgjbK`enHVh`UZ
bhEVhHg KL¢TF]bSTMT^blIyK nb?TT^i]gjK¢`^K[p]KIyKplZUTMbdZUFHKBVdijgjWH`UK¢TUKJIMVhplZ^io[TMz?i ?KJp ijp ijZUT8I(ikHk]gjK
n2Vh`UZ[SF]ioCFip ZUWH`pSV?`^KTUb?I(K¢bhZUF]Kn2blTUTUijHg K`UK®p]KJI(KJplZ8bhZUF]KVdijgjWH`UKTUKJIMVhplZUijoJT8zhijhKp
ip ZUF]K WHnHnKJ`^nHVh`UZ[ ¥ep zhKp]KJ`Vdg>" KBoJVhp VhTT^b]oiVdZUKZUbTUb?I(KVhW]gjZMZ^b?g K`UV?pHoKnH`^bln2K`^Z\54MZUF]K
TUK[ZbdVhW]gjZZUbhgjKJ`VhpHo[KnH`^bln2K`^ZUi KT76JL6J3$84 h5i>K? ZUF]KT^KJZbd4MTVhg ZUKJ`pHVdZUi ?KM`UK®p]KJI(KJplZT[
EFHijTbl`^zlVhp]i&JVhZ^ijb?p`^KTUW]gjZUTmijpBV8o[gjV?TUTUi o[VhZ^ijb?pbdVhW]gjZSZ^b?g K`UV?pHoKnH`Ub?nKJ`UZ^ijKJTJHSF]ioCF nKJ`IyijZUTmZUF]K
kHKJTUi zlp]KJ`Z^bo[b?pHTUijkHKJ`b?p]gj\o[b?``^KoZ5`^K[p]KJI(Kp?ZT5bd.T^blIyKV?HT^Z`UV?oZ5T^bhZ V?`^K oblpHT^Z`UVhijplZT`UK[zlVh`k]ip]z
V?W]gjZ7Z^b?g K`UV?pHoK? "X]ijTUZ^ip]zS b?`¡ K?zTUK[K 7 L = 8.TW]zhz?KJTUZUT.ZFHVdZ7blpHoK"ZF]Ka`UKpHKJI(KJplZ[T7o[b?``^KoZUpHKJTT.ijT
?KJ`UiKJkZUF]K `^K[p]KIyKplZnHVdZUZ^K`UpHT`^KnH`UKJTUKJplZ^KkOl\ZUFHKogVhTTUioJVdZUi blpOToCF]KI(VoJVhpKWHTUKJki ZF]b?W]Z
pHK[KJkHijp]zZUbn2`^b?KZF]K[i`obl`U`UKJo[ZUp]KTUTJ EF]iTTW]zhz?KJTUZ^ijb?p iTMVdgjijk ip ZF]K¢o[V?T^Kbd°VhW]gjZZ^b?g K`UV?plZ
TUbdZVh`UK$Vh`oCF]ijZ^KoZUW2`^KT[,VhTg blp]zmV?T7ZUFHK `UKpHKJI(KJplZnH`Ub]oKTUTk]bYKJTp]bhZob?p2T^ik]KJ`oblpHT^Z`UVhijplZT`UK[gVdZ^Kk
ZUbMbhZUFHKJ`p]blpYWHpHo[Z^ijb?pHVhg7b?`Vdgjzhbl`^ijZUF2IyioT^bhZ V?`^KOVhTn2KoZT[
` ijhKp¢ZUFHK(V?2b?Kb?HTUKJ`UVdZUi blpZF]KMogVhTT^i o[VhZ^ijb?p ToCF]KJIMVo[VhpT^K`^?KVhTOVTUZU`WHoZWH`UKJk¢`UKJnH`UK
TUKJplZVdZ^ijb?pbh5ZF]Ky¡Yp]bgjKJkHzhKVhb?W]Z°ob?``UKJoZS`UK®p]KJI(KJplZTSbd5V?W]g ZmZ^bhgjKJ`Vhp2oKnH`Ub?nKJ`UZ^ijKJTZFHVdZOFHVhT
K[Kpb?HZUVdip]KkijpZF]Kn2VhTUZ[£KF2V,hK8VhkHb?n]ZUKJkZF]KTUZU`Vdijz?FlZb?`UVh`kviIMn]gjKJI(KJplZUVhZ^ijb?pbhSZUF]K
o[gjV?TUTUi o[VhZ^ijb?pBTUoCFHKJIMV8VhT°V8k]iTUo[b?pHpHKJoZUKJk¢kHij`UKJo[Z^KJk V?o\]ogjioz?`VhnHF ` ®SF]K`^KVp]b]k]K`UKJnH`UK
TUKJplZTV°V?W]g Z5ZUbhgjKJ`VhpHo[K nH`Ub?nKJ`UZ\hijZUT"n2Vh`UKJplZUT5`UKJnH`UKJTUKJplZZUF]KVh2T^Z`UV?oZ^ijb?p2T7bl`5SF]ijoCFyZUFHKn2`^bln2K`^Z\
`UKJn2`^KT^Kp?ZUKJk?\ZUF]Kz?i ?KJpp]b]k]KijTSVMo[b?``^KoZ`^K[p]KJI(Kp?ZJHVhpHkijZUToCF]ijgkH`^KpB`^KnH`^KT^KplZZF]K¡Yp]bSp
o[b?``^KoZS`UKpHKJI(KJplZUT°bd$ZF]K(zhijhKJpV?W]gjZmZ^b?g K`UV?pHoKynH`^bln2K`^Z\?S¯5i zlWH`UKLijgjgjWHTUZU`VdZUKJTmz?`VhnHF]io[Vhg gj\V
n2Vh`UZObhZF]K8k]iTUo[b?pHp]KoZUKJk ` ZFHVdZo[b?``^KTUnb?pHk2T°ZUbBZUF]KMVhi gWH`UKMTUKJIMV?p?ZUijoJTOzhijhKJpvipvEVh]gjKBLh
n2W]gjVhZ^KTTUW2oCFV o[gjV?TUTUi o[VhZ^ijb?pTUoCF]KIMVH VhTUKJkblpvZF]K`UKJTW]gjZUTbdZF]KnH`Ub]oKJTTZUF2VdZhK`^i 2KTZUF]K
o[b?``^KoZp]KJTT"bdVzhijhKJp`UK®p]KJI(KJplZJlZF]KmZUbYbhg.o[VhpMipHTUKJ`UZVpHK[ VhWHg Z Z^b?g K`UV?pHoKSnH`Ub?nKJ`UZ\(ijplZ^byZUF]K
o[gjV?TUTUi o[VhZ^ijb?p(TUoCF]KIMVH ¢b?`UK[b?KJ`JzhijhKJpMVV?W]gjZ$Z^b?g K`UV?pHoKSnH`Ub?nKJ`UZ\h?ZUF]KmZ^bYbhg®I(V,\(`^KJZU`Ui KJhKSbhZF
ijZUT`UK®p]KJI(KJplZTb?` ZUF]KV?HTUZU`VhoZUi blpHTb?` SF]ioCFZUF]KzhijhKpn2`^bln2K`^Z\Mbl`UIMTVMob?``UKJoZ`UKp]KI(KJplZ[
DoReplace Replacement
Roll-forward Reliability
DoClean-up
Crash Safety
Clean-up
Re-initialize
Rollback Atomic
Availability
¯ijz?W2`^KML <"EF]K ` o[b?``^KTUnb?pHkHijp]zyZ^bMZUFHKTUnKJo[ioJVdZUi blpz?i ?KJpijpBEVh]gjKMLh
EF]K`^K[p]KIyKplZUToJVhn]ZWH`^Kkijp ZUF]Ko[gjV?TUTUi o[VhZ^ijb?pTUoCFHKJIMVH5`^KnH`UKJTUKJplZV z?`Vhk2VdZ^ijb?pv`Ub?I ZUF]K
V?HTUZU`VhoZ"Tn2Koi o[VhZ^ijb?pHT5bh.VdijgjWH`UKT^KIMVhplZ^io[T"ZUboblpHo[`UK[ZUKkHKJTo[`Uijn]ZUi blpHT5bd.V?W]g Z"ZUbhgjKJ`VhpHo[KnH`^bln2K`e
ZUi KT[]SFHijoCFo[V?pKk]K[ZVdijg KkKp]b?W]zlFTUbMVhT Z^bTUKJ`UhKVhTnH`UKJoiTUKTnKJoi oJVdZ^ijb?p2TbhVyVhWHg ZZ^b?g K`UV?plZ
I(KoCFHVhp]iTI(TJ mKpHoK?aijZMijTMnb?TT^i]gjKZUbV?TUTUb]oiVdZ^Kn2b?ijplZUKJ`TZUb `
p]b]k]KJT(ZFHVdZnbhip?Z(ip?ZUbV
`UKJnb?TUijZ^b?`U\bh"VhW]gjZOZ^bhgjKJ`VhplZmI(KoCFHVhp]iTI.Vhp2k ZUF]KpWHTUKZF]Kyo[gjV?TUTUi o[VhZ^ijb?p ToCF]KJIMV8V?TmzlW]ijk2VhpHo[K
I(KVhpHTb?`5ZF]KSTUK[gjKJoZUi blpbh®V°VhW]gjZ"Z^b?g K`UV?plZI(KJoCF2Vhp]iTUI V?T5ZUF]KgVhTUZ"T^ZUKJnybd®V`UKpHKJI(KJplZ"nH`UbYo[KJTT[
£KH`Uip]z Z^b¢ZF]K`UKJV?k]KJ`JTVhZ^ZUKJplZ^ijb?pZFHVdZZF]KTVhI(KMVhWHg ZyZ^bhgjKJ`VhplZI(KJoCFHV?p]iTUI o[V?pKo[gjV?TUTUi
KJk WHpHkHKJ`OIybl`^KZFHVhp¢b?p]K ` pHbYkHKh.T^ipHoKi ZOIyijz?FlZmn2`^bYik]KI(b?`UKZUFHV?pBb?p]KVhW]gjZmZUbhgjKJ`VhpHo[K
n2`^bln2K`^Z\? b?p2T^ik]KJ`b?`K[X]V?IMn]g KZF]KoJVhTUKbdSVhpiIMn]g KI(KJplZUVhZ^ijb?pbd¥Ufl¥Uf 7s84SFHijoCFTVdZUijT^2KJT
Vhg g®ZUF2`^KJKOnH`UKJkHijoJVdZ^K
T
(QT
T
(VhpHk
T (Bz?i ?KJpipEVhHg K
=
"EF]KOob?``UKJTn2blpHk]ip]zI(K
oCF2Vhp]iTUI TF]blW]gjkp]bhZK`^KJzhiT^ZUKJ`UKJkblp]g \8V?T ijIMn]gjKJI(KJplZVdZ^ijb?pbdb?p]KObdZUF]KZUF2`^KJKmV?W]g ZZUbhgjKJ`VhpHo[K
n2`^bln2K`^ZUi KT[
EF]K8o[gjV?TUTUi o[VhZ^ijb?pToCF]KI(VBnH`UbYijkHKJTV oblpHT^ik]K`UV?]g KMVdikvijpipHk]io[VdZUijpHz¢n2blTUTUijHg KoCF]b?ijo[KJT°b?`
ZF]KmV?nHnH`Ub?nH`UijVhZ^K VhWHg Z$ZUbhgjKJ`VhplZ$I(KJoCFHV?p]iTUI i ZF`^KTUnKJo[Z$Z^bTUb?I(KVhWHg ZZ^bhgjKJ`Vhp2oK`^K¤YW]ij`UKJI(Kp?ZT[
°bKJhK`[ZUFHijTijTTW]Kip ijZUTzhgjb?HW]gVh`UijZ\ iT8V?``Ub?I oblpHT^ik]K`^Kk VhTTUK[ZUZ^gjKJk EF]KvpYWHIy2K`bh
ipHoJVh`pHVdZUi blpHTZFHVdZIMV,\ o[b?``^KTUnb?pHk Z^bVvTUip]zhgjKVhW]gjZMZ^bhgjKJ`Vhp2oKBnH`^bln2K`^Z\ oJVhp 2K¢I(b?`UKZUFHV?p
blp]Kh"V?pHkT^ZUi gjg ZUF]KVhW]gjZZUbhgjKJ`VhplZI(KJoCFHV?p]iTUIMTIMV,\FHV,hK`UV?k]ijoJVdgjg \k]i®K`^Kp?Z(VdZUZU`UijHWHZ^KJTJEF]K
kHi.KJ`UKJpHo[KJTo[V?p¢KMk2W]KyZUbV?oZUb?`Tmip W]KpHoKkvl\ b?ZUF]K`°TUbdZVh`UKyV?TUnKJo[ZUTJ®i``^KJg KJ,V?plZmZ^bVdijgWH`^K
TUKJIMV?p?ZUijoJTKhz2 TU\]pHoCFH`Ub?p]i&JVhZ^ijb?p oCFHV?`UV?oZUKJ`UijTUZ^io[T4mKJp2oKhZUF]K¢`UKJV?k]KJ`MTF]b?WHgjk oblpHT^ik]K`yZFHVdZ
ZF]Ko[gjV?TUTUi®o[VdZUi blpTUoCF]KIMV o[VhpK8KI(nHg b\?KJkZ^bvF]K[gnZUF]Kk]KJTUijz?p]K``^K^ceKJo[ZZUF]blT^KMV?W]gjZZ^b?g K`UV?plZ
I(KoCFHVhp]iTI(TmZUFHVhZ°V?`^KpHbhZm`UK[gVdZUKJkBipVhpl\ V,\i ZF ZUFHK(TUbdZVh`UKVdijgjW2`^K`UKJ¤YW]i`UKJI(KJplZUTJ`VdZF]KJ`
ZFHVhpV?TVBZ^bYb?g$b?`T^KJg KoZ^ip]z¢V¢TUK[ZbhVhW]gjZZ^b?g K`UV?pHoK8I(KoCFHVhp]iTI(Tob?p]b?`Iyip]zBijZUF TUbdZVh`UK
`UKJ¤YW]i`UKJI(KJplZUTJ
2%'&( ( % & )*2%3) (&(% !% % %3$
OplZ^ijgZF]iTn2b?ijplZ[ KMFHV,hKkHKJVdgjZOi ZFZF]K(V?pHVdgj\]T^iT°bd$V?W]g ZZUbhgjKJ`VhpHo[KnH`Ub?nKJ`UZ^ijKJTOVhTVk]blIMVdip
TnKJoi oT^bhZ V?`^KVh`oCF]ijZ^KJo[ZUWH`UKh"ipHk]Kn2KpHk]Kp?ZUg \ `^blI ZUF]KBbhZF]KJ`Mp]blpYWHpHo[Z^ijb?pHVhgb?`(Vdgjzhb?`UijZUFHI(io
TUbdZVh`UKmV?TUnKJo[ZUTJEF]iT ijTWHTUKWHgbl`aZF]Kob?p2T^Z`UWHo[Z^ijb?pbhVV?W]gjZZUbhgjKJ`VhplZI(KJoCF2Vhp]iTUIlijpSF]ioCF
oJVhTUK¢F]b K[hK`[ Ko[V?p p]b gjb?p]z?KJ`8o[b?pHTUik]KJ`ZF]K¢V?W]gjZZ^b?g K`UV?pHoK¢n2`^bln2K`^ZUi KT8VhTp]b?pYW2pHoZUi blpHVdg
TUbdZVh`UKV?TUnKJo[Z[ HW]Z`UVhZUF]K`MVhT(i ZTVdgjzhbl`^ijZUFHI(ioV?TUnKJo[ZUTJ £;F]ijg KBZF]K W]Z^ijg ijZ\ bhOTUZUWHk]\Yip]zZUF]K
o[b?pHTUZU`WHo[Z^ijb?p bdV?W]g ZZ^b?g K`UV?p?Z8I(KoCFHVhp]iTI(TijTijp2ob?plZUKJTUZUVhHg K?b?WH``^KT^KVh`oCF VhTMblT^ZUKJ`UKJk l\
ZF]KMp]K[KkZUbTWHnHnb?`UZ°ZF]KVhpHVhg \]TUijT°bdaVhW]gjZZ^bhgjKJ`Vhp2oKyn2`^bln2K`^ZUi KT°V?TOVp]blpYWHpHo[Z^ijb?pHVhg5V?TUnKJo[Z°bh
VkHijTUZU`Uij2W]Z^Kk V?nHn]gjijoJVdZUi blp/°KJpHo[Kh2KT^ik]KTZUF]Kvo[Vhn2Vh]ijg ijZ\ ZUb VhpHVhg \$&[K V?pHk Z^bKXHnH`UKJTTMV?W]g Z
ZUbhgjKJ`VhpHo[KnH`Ub?nKJ`UZ^ijKJTJa KBp]K[Kk ZUbK TUW2`^KBZUF2VdZMZUF]K nH`Ub?nb?TUKJk b?`IMVdg `UV?I(K[ b?`¡Vhg gjbST(ZUF]K
kHKJTUi zlp]KJ`Z^boblpHTUijk]K`ZF]Koblp,c^WHpHo[Z^ijb?pbh2Vhi gWH`UK TUKJIMVhplZUijoJTijZUFyZUF]Ko[b?pHTUZU`VdiplZUTn]gjV?oKkl\bhZF]KJ`
pHb?pYWHp2oZ^ijb?p2Vdg$Vhp2kvVhg z?b?`Ui ZFHI(ijo(T^bhZ V?`^KMVhTnKJoZT[MEF]KMV?oZZUFHVhZZUF]K8n2`^bln2blT^Kk `VhI(K[ b?`¡ijT
2VhTUKJkblpnH`UKJk]io[VhZ^K$gjbhz?ijohSFHijoCFyFHVhT2KJKJpTWHoJoKJTT^W]g gj\WHTUKJkbl`n2`^b?z?`VhI TnKJoi oJVdZ^ijb?p7,TW]z?zhKJTUZUT
V?p - ob?IMnHVhZ^i]ijg ijZ\vijZUFZF]KK[XHnH`^KTUTUijb?pHTbhzhKJpHKJ`VdganH`Ubhzl`UV?ITn2Koi o[VhZ^ijb?pHTKhz2¢TUK[K
7 LhL,8"C°EF]iTmiIMn]gji KTmZFHVdZOi Z°ijTOnb?TT^i]gjKZ^bKXHnH`UKJTTSZUFHKyoblpHTUZU`Vdip?ZTm`UK[gVdZUKJkBZ^bVh`Ui blWHTmTUbdZVh`UK
V?TUnKJo[ZUTijpZUF]KTVhI(K$bl`UIMVhgh`VhI(K[ b?`¡°i ZFgji ZUZ^gjK K ®bl`^ZJ;:OWH`KXHnKJ`Ui KpHoKTUbSVh`FHV?TTF]bSpZFHVdZ
TUbdZVh`UK5nH`^bln2K`^ZUi KT7`UK[gVdZ^KkOZ^bVhWHg Z7ZUbhgjKJ`VhpHo[K 7Ls 8>V?pHkT^Ko[WH`Ui Z\%7
=
8lo[V?p2KaW2p]ibl`UI(gj\mK[X]n2`^KTUTUKJk
b?`UK[bhK`[JK FHV,hKp]bhZKJpHo[b?WHplZ^K`^KkVhpl\nH`Ub?]gjKJIMT\hK[Zi ZFZ`UV?pHTUV?oZUi blpHVdglnH`^bln2K`^ZUi KT[Vhg ZF]b?W]zlF
blWH`KXHnKJ`Ui KpHoKipZF]iTSk]b?IMVhijpijTmT^ZUi gjgnH`UK[gjijI(ipHVh`U\ K?z$T^KJK78"C
EF]K°Vhk]VhplZVdzhKbh.K[XHnH`^KTUTUip]zZUF]KOVdgjzhb?`UijZUFHI(io V?pHkMZUFHKSVh`Ui blWHT"p]b?p]WHpHoZUi blpHVdg®T^bhZ V?`^KnH`Ubd
nKJ`UZ^ijKJT°b?pVWHp]i 2KkHV?T^iT[®iT°ZFHVdZ°K(o[V?p¢`^KVhTUb?pBblp ZUF]KJij`OoblI]ipHVhZ^ijb?pHT°VhpHkvk]K[ZUKJoZOn2blTUTUi]g K
ipHo[b?IMnHVdZUijHi gji ZUi KTmV?Iyblp]z8ZF]Kyo[b?pHTUZU`VdiplZUTS`UK[gVdZUKJkBZ^bk]i.KJ`UKJplZmTUbdZVh`UKVhTnKJoZT[¯b?`mKXHVhIMn]gjKh
gjK[ZMWHTo[b?pHTUijkHKJ`yZUF]KBo[V?T^Kbd°VTUbdZVh`UKVh`oCF]ijZ^KJo[ZUWH`UKZFHVdZFHV?TykHKp]Kk Vhg gV?TUnKJo[ZUTMHW]Z(ZUF]blT^K
`UK[gVdZUKJk Z^bV?W]g ZZ^bhgjKJ`Vhp2oKh VhpHk ZFHVdZMVhi gWH`UK¢ob?p2T^ik]KJ`VdZUi blpHTMTUFHb?W]gk 2K iplZU`UbYk2WHoKki ZF]b?W]Z
Vhg ZUKJ`UijpHzZUFHK(o[b?pHTUZU`VdiplZUTOn]gjV?oKkl\BZUF]K`UKJTUZmbdZUF]KTUbdZVh`UKVhTn2KoZT[EF]KMk]KT^ijz?p]K`°oJVhpvT^ZVh`UZ
ijZUF TUb?I(Kip]ijZ^iVdgVhi gWH`UKo[b?pHTUZU`VdiplZUT(VhpHk hKJ`Ui \ZUF]KJij`MoblIMnHVdZUij]ijgji Z\ ijZUF KX]iT^ZUijpHzTUbdZVh`UK
n2`^bln2K`^ZUi KT[C:OpHoKSZF]Kmo[b?IMnHVdZUijHi gji Z\(iT$hK`^i 2KkhZF]Kmk]KT^ijz?p]K`[lWHTUijp]zZF]K°n2`^bln2blT^Kkyo[gjV?TUTUi®o[VdZUi blp
ToCF]KI(V2?IMV,\MoCF]bYb?TUKmT^blI(Km`^K[p]KIyKplZabdZF]KmVhi gWH`UKmoblpHTUZU`Vdip?ZT[£;F]ijg KOZUF]KOobl`U`UKJo[ZUp]KTUT"bh7ZUF]K
`UK®p]KJI(KJplZijZUFB`^KTUnKJo[ZZ^bMZUFHKVhW]gjZZ^b?g K`UV?pHoKnH`Ub?nKJ`UZ^ijKJTiTp]bhZSpHKJoKTUTVh`U\hYZF]KoblI(n2VdZ^i]ijg ijZ\
bhZF]K`^K[p]KJI(Kp?Z"`UKJTW]gjZUT5ijZUFyZUF]KK[XYiTUZ^ip]zOTUbdZVh`UKnH`^bln2K`^ZUi KT5IWHTUZ"2KoCF]KoC¡dKJkyVdzlVdip °bhZ^ioK
FHbKJhKJ`J,ZUFHVhZ"k]KJkHW2oip]zZUFHVhZ5Vo[b?IHijpHVhZ^ijb?pbd®pHb?pYWHp2oZ^ijb?p2VdgHnH`Ub?nKJ`UZ^ijKJTiT`UK[K `Ub?I ipHo[b?IMnHV
ZUijHi gji ZUi KTkHblKTap]b?ZaiIMn]g \(ZUF2VdZa KSbl]ZUVhijp8Vk]KJTo[`UijnHZ^ijb?pMbd7F]b ZUbVhoJob?IMn]gjiTUFMZF]K°o[b?IHijpHVhZ^ijb?p
EFHijTiTSVhpHbhZUFHKJ` ijTTW]KZUFHVhZg ijKJTblW]Zbd5ZUF]KZUb?n]io[TkHijTo[WHTTUKJkijpZUFHijTSn2VhnKJ`J
EF]KSn2`^b]oKkHWH`UKk]KJTo[`UijKJkMV?2b?K iT5ijZ^KJ`VdZUi ?K[gj\KJIMn]gjb\hKkyW2p?ZUi gZUF]KSnbhiplZ"SF]KJ`UKZUFHKSk]KJTUi zlp]KJ`
bl]ZUVhijp2TVhpK[gVhb?`VdZUKJkT^bhZ V?`^KVh`oCF]ijZ^KoZUW2`^KZUF2VdZSk]KTUoJ`^i2KTzhgjb?2Vdgjg \8ZF]KVh`Uijb?WHTTUbdZVh`UKV?Te
nKJo[ZUTJEF]K ip?V?`^iVhplZ7ZFHVdZTUF]blW]gk2K hK`^i 2KkijpVhg glijZ^KJ`VdZUi blpTUZ^KJn2T[,iTZFHVdZZUF]K T^KJZbh2ob?p2T^Z`UVhijplZUT
TF]blW]gjk `UKJIMVhijpBoblF]KJ`UKJplZJ2i>K? ZF]KJ`UKV?`^Kp]bob?p 2ijo[Z^ip]zo[b?pHTUZU`VdiplZUTipBZUF]KyVh`Ui blWHTSTUbdZVh`UKV?Te
nKJo[ZUTJ"¥4V?pipHoblIMnHVdZUij]ijgji Z\iTk]K[ZUKJo[Z^KJkkHWH`Uip]zT^blIyKOijZ^KJ`VdZUi blpYZUF]KpZUF]Kk]KT^ijz?p]K` ijToJVdgjg Kk8Z^b
oCFHblblT^KV?p]bhZF]KJ`mVdgjZ^KJ`pHVhZ^ijhKbdanb?TT^i]gjK`^K[p]KIyKplZ[¥ep ZUFHKo[V?T^KSF]K`^KijpHo[b?IMnHVhZ^i]i gjijZ^ijKJTm`VdiTUK
bl`aVhg g.VdgjZ^K`UpHVhZ^ijhKS`UKpHKJI(KJplZUT `UK[zhiTUZ^KJ`UKJk(ipZUFHKOo[gjV?TUTUi®o[VdZUi blpMTUoCF]KIMVHlZUF]KOk]KJTUi zlp]KJ`FHVhTaZ^b(k]K
o[ijkHKSK[ijZUF]K`$ZUb`^KI(bhKSTUb?I(KbdZUFHK°oblpHTUZU`Vdip?ZT$`UK[gVdZ^Kk(Z^bb?ZUF]K`aTUbdZVh`UKV?TUnKJo[ZUTJ?bl`"Z^bKXHnHVhp2k
ZF]KogVhTTUioJVdZUi blpToCF]KJIMV(?\ijplZ`^b]kHWHo[ijpHzMpHK[ `UK®p]KJI(KJplZTbd5ZUF]KnH`Ub?Hg KI(VhZ^ionH`^bln2K`^Z\?
¥epZF]K8zhKp]KJ`Vdg"oJVhTUKh KKXHnKJo[ZZUFHVhZZUFHK8`^K[p]KJI(Kp?ZbdT^bhZ V?`^KMVhTn2KoZTi gjgKk]blp]Kip
n2Vh`Vdgjg KJgaVhpHkFHKJpHo[Kh5ijpZF]KoJVhTUKbdipHoblI(n2VdZ^i]ijg ijZ^ijKJTJ5ZUF]Kk]KJTUi zlp]KJ`i gjg F2V,hK8I(b?`UKZUFHV?pb?p]K
oCFHbhioKablpSFHVhZ`UK®p]KJI(KJplZZ^boCFHVhpHzhKh¯5i zlWH`^K = ijgjgjWHTUZU`VdZUKJTz?`Vhn2F]ijoJVdgjg \OZUFHK ijZ^K`UVhZ^ijhK `^K[p]KJI(Kp?Z
n2`^b]oKTUTJ(£;F]KJpVdgjg$TUbdZVh`UK(nH`Ub?nKJ`UZ^ijKJTV?`^K`UKp]KkipnHVh`Vdgjg KJg*ZUF]K`^KIW2T^ZK8T^blI(K(nH`Uijb?`Ui Z\
ZFHVdZijgjg7k]KpHKSF]ijoCFBTUbdZVh`UK°V?TUnKJo[ZUTVh`UKI(b?TUZTUijz?p]i o[V?plZV?pHkF]KJpHo[KTUFHb?W]gkKZUFHKgjV?T^ZZ^b
oCF2Vhp]z?Kh :°ZUF]K`^iT^K?ZF]KMk]KJTUi zlp]KJ`°ijg g"K(o[b?pY`Ub?plZ^KkBi ZFVgjV?`^z?KVh`Ui KJZ\bhoCF]b?ijo[KJT°i ZF]b?W]Z
V?pl\8ijp2k]ijoJVdZUi blpblpSF]ioCFBTUFHb?W]gkKnH`UKK`U`UKJk
Ok
Incompatibilities
Transactions Nonfunctional X Fault Tolerance Security
Refinement Verification Compatibility
Elaborated Architecture
Software
.
More refinement
¯5ijz?WH`UK = <5EF]KijZ^KJ`VdZUi ?K`^K[p]KJI(Kp?Z$n2`^b]oKTUT5ZFHVdZag KVhkHT5ZUbZUF]KSKJgjV?2bl`UVhZ^KkyTUbdZVh`UK V?`UoCFHi ZUKJoZWH`UK
kHKJTo[`Uijn]ZUi blp
8
EbBk]KJI(b?p2T^Z`UVhZ^KyFHbqZUF]KMk]KT^ijz?p]K`mbln2K`UVhZ^KTmipZF]K(,V?`^ijb?W2T°TUbdZVh`UKyk]KJhKJg blnHI(KJplZ°TUZUVhzhKJTJ.K
o[b?pHTUik]KJ`ZF]KK[XHVhIMn]gjK8bdSVB2gjKTU\]T^ZUKJIbYoJWHTUijp]zvnH`^iIMVh`Ui gj\b?pZUFHKTn2Koi o[VhZ^ijb?pbdSZF]K8V?W]g Z