A lot of people contributed to this work. In particular, we would like to thank Brad Glade and Alexey Vaysburd for valuable discussions about the architecture and interfaces, Mike Reiter for his work on security mechanisms for Horus, Katie Guo for initial work on the CLTSVR layer, and William Chan for work on monitoring and resource control. Robert Cooper and Barry Gleeson provided useful suggestions early in the design of Horus. We have learned much from discussions with people from the Transis project, notably Dalia Malki, Yair Amir, and Danny Dolev. Werner Vogels, Gautam Thaker, Dalia Malki, and Mark Hayden provided useful comments on an initial draft of this paper.