Design a service recovery protocol