Idempotence and infrastructure-level rollback seem essential, especially in complicated transactions that require multiple external side-effects.