1. A method comprising: receiving an input which describes a revision to at least one of a plurality of instances in a model of a distributed system, wherein: the plurality of instances form an instance space which describes a configuration of the model of the distributed system; and the revision pertains to a change in configuration to the at least one said instance; and synchronizing the model with the distributed system such that the revision, when applied to the model, is propagated to the distributed system.