Recovery semantics for a DB/DC system