Checkpointing needs to be fully atomic. If it fails, it needs to restart at startup.
Checkpointing needs to be fully atomic. If it fails, it needs to restart at startup.