The （ ） scheme in a database system is responsible for the detection of failures and for the restoration of the database to a state that existed before the occurrence of the failure.