A simpler, safer programming and execution model for intermittent systems