Catch boundary leaks in your domain-driven code.
Recent revisions are kept. Restoring one creates a new revision.
