Distributed-transaction coordinator with LIFO compensating rollback. Each step has Do + Undo. If a mandatory step fails, all prior Undo functions run in reverse order under an uncanceled context. Optional steps may fail without aborting the saga.