Proving crash safety for systems with layered recovery - View it on GitHub