CCI Model

Sun, Jia et al.’s (1998) correctness model for Operational Transformation: a real-time collaborative-editing system must achieve Convergence (all replicas converge to the same state given the same operations in any order), Causality preservation (operations causally related execute in causal order at every replica), and Intention preservation (each operation produces its user’s intended effect even amidst concurrent operations). Intention preservation is the property that distinguishes OT from earlier serialisation-based approaches and is what makes the transformation function necessary.

In this vault

Backlinks

Linked Pages

Transformation Function

The fundamental construct of Operational Transformation: T(o₁, o₂) returns the version of operation o₁ that should be applied to a state where o₂ has already executed, so that the intended effect of o₁ is preserved. For text editing, T(insert("X", 5), insert("Y", 3)) returns insert("X", 6) — position adjusted because the prior insertion shifted indices. Required to satisfy the TP1 property (T(o₁, o₂) ∘ o₂ = T(o₂, o₁) ∘ o₁) and, in the general multi-replica case, TP2 (the analogous property for triples). TP2 satisfaction has historically been the source of most subtle OT bugs.

In this vault

Operational Transformation

Ellis & Gibbs’s (1989) concurrency-control technique for real-time collaborative editing: each replica executes local operations optimistically, and remote operations arriving over the network are transformed by the operations executed locally since the common ancestor before being applied. The transformation preserves the user’s intended effect under concurrent modification. The technical substrate of Google Docs, Office Online, Etherpad. Conceptual ancestor of CRDTs, which achieve the same convergence guarantees through commutative operations rather than transformation functions.

In this vault

Concurrency Control in Groupware Systems

Reference: Ellis, C. A. & Gibbs, S. J. (1989). Concurrency Control in Groupware Systems. In Proceedings of the 1989 ACM SIGMOD International Conference on Management of Data, pp. 399–407. (Foundational follow-ups: Ressel, Nitsche-Ruhland & Gunzenhäuser 1996 An Integrating, Transformation-Oriented Approach to Concurrency Control and Undo in Group Editors (CSCW ’96, the adOPTed algorithm); Sun, Jia, Zhang, Yang & Chen 1998 Achieving Convergence, Causality Preservation, and Intention Preservation in Real-Time Cooperative Editing Systems (TOCHI 1998, the CCI model).) ACM DOI · Open access PDF (LRI)

Summary

Ellis and Gibbs introduce Operational Transformation (OT), the foundational concurrency-control technique for real-time collaborative editing. The setting is a groupware system in which multiple users edit a shared document concurrently, with each user’s local replica updated optimistically (no locking, no waiting for a server) and remote operations applied as they arrive over the network. The naive approach — apply each remote operation as-is — fails because operations from different sites may have been generated concurrently against different document states, and the same operation produces different results depending on what other operations have already executed. OT solves this by transforming each remote operation against the operations that have executed locally since their last common ancestor, so that the transformed operation produces the intended effect when applied to the local state. The fundamental object is the transformation function T(o₁, o₂) returning the version of o₁ that should execute against a state where o₂ has already executed. The properties required of T are summarised in the CCI model (Sun, Jia et al. 1998): convergence (all replicas converge to the same final state when all operations have executed), causality preservation (operations causally related execute in the right order at every replica), and intention preservation (each operation produces the user’s intended effect even when concurrent operations have changed the document around it). The Ellis-Gibbs paper supplied the foundational dOPT algorithm; subsequent decades of work (adOPTed, GOT, GOTO, SOCT2/SOCT3/SOCT4, COT, TIBOT) refined the theory and addressed correctness bugs in the original. OT is the technical substrate of Google Docs, Microsoft Office Online, Etherpad, and many other production collaborative editors. CRDTs (Shapiro et al. 2011) are the conceptual successor that achieves the same convergence guarantees through commutative operations rather than transformation functions.

Key Ideas

Optimistic local execution + transform remote: each user’s operations execute immediately against the local replica; remote operations arriving over the network are transformed by the operations that have executed locally since the common ancestor, then applied.
Transformation function T(o₁, o₂) returns the version of o₁ that achieves the same intended effect when applied to a state where o₂ has already been applied. For text editing, T(insert("X", 5), insert("Y", 3)) returns insert("X", 6) — the position shifts because the prior insertion at position 3 added a character before position 5.
CCI correctness model (Sun, Jia et al. 1998): convergence (all replicas converge to the same state given the same operations in any order), causality preservation (causally related operations execute in causal order everywhere), intention preservation (each operation produces its user’s intended effect even amidst concurrent operations).
Transformation properties: TP1 (T(o₁, o₂) ∘ o₂ = T(o₂, o₁) ∘ o₁ — diamond closure for any pair), TP2 (the analogous property for triples). TP1 alone is sufficient for two-replica systems; TP2 is required for the general case and turns out to be remarkably hard to satisfy correctly — multiple proposed transformation functions have been shown over time to violate TP2 in subtle cases.
History buffers and operation contexts: each replica maintains a buffer of operations executed since the last network synchronisation; remote operations are transformed against the buffer in arrival order, with careful attention to causality.
Server-mediated vs peer-to-peer: the most-deployed OT systems (Google Docs, Apache Wave) use a server-mediated star topology that simplifies the transformation problem; peer-to-peer OT (the academic mainline) requires the full TP1+TP2 machinery.

Connections

Conceptual Contribution

Claim: Real-time collaborative editing of a shared document by multiple concurrent users can be supported by a transformation function that adjusts each remote operation against the operations that have executed locally since the common ancestor — preserving the user’s intended effect even when concurrent operations have changed the document around it. The CCI correctness conditions (convergence + causality preservation + intention preservation) characterise what such a system must achieve.
Mechanism: Optimistic local execution; transformation function T(o₁, o₂) adjusting remote operations against the local operation history; history buffer per replica; transformation properties TP1 (and, in the general case, TP2) ensuring convergence under arbitrary execution orders.
Concepts introduced/used: Operational Transformation, Transformation Function, CCI Model, TP1 / TP2 properties, History Buffer.
Stance: foundational systems-engineering paper.
Relates to: Conceptual ancestor of CRDTs (Shapiro et al. 2011), which achieve the same convergence guarantees through commutative operations on richer data types — eliminating the need for a transformation function at the cost of a more elaborate data-structure design. The two are different solutions to the same problem, with different operational profiles: OT is light on the data structure (any operation type works) but heavy on the protocol (transformation function correctness is subtle); CRDTs are heavy on the data structure (must be carefully designed for commutativity) but light on the protocol (operations are simply broadcast). Production systems mostly use OT (Google Docs, Office Online, Etherpad) or hybrid OT-CRDT designs (Atom Teletype, Yjs in OT-mode); Automerge is the most-prominent pure-CRDT production system. Conceptually adjacent to the CALM Theorem line: OT is a coordination technique for non-monotonic operations on shared state, while CALM characterises the boundary between operations that need coordination and those that don’t. The intention-preservation property of OT is precisely what is missing from the MAST failure modes of multi-agent LLM systems where agents concurrently modify shared state without any equivalent of the OT machinery — a research-and-engineering opportunity that the CRDT literature has begun to address but the LLM-agent-coordination literature has not.