On Low-Cost Error Containment and Recovery Methods for Guarded Software Upgrading