1. A computer-implemented method for determining undoability of an action to be conducted in an API-controlled computing system represented by a formal domain model, comprising: obtaining a set of pre-states of the API-controlled computing system for the action; obtaining a set of post-states of the API-controlled computing system corresponding to each pre-state in the set of pre-states for the action; automatically determining if each post-state in each set of post-states of the API-controlled computing system can be undone to its pre-state in the set of pre-states by using a reachability task for the post-state and its pre-state; and determining the action to be conducted in the API-controlled computing system is undoable if each post-state in each set of post-states of the API-controlled computing system can be undone to its pre-state in the set of pre-states.