Run your code in hardware-isolated VM sandboxes.
Recent revisions are kept. Restoring one creates a new revision.