Inevitable uncertainty about the validity of object transformation code that hinders the practical adoption of release-level dynamic software updates (DSU): programmers have a hard job in validating their transformers in general, and administrators have a hard job in validating delivered transformers right before update installation to their specific systems. This motivates us to look into mechanisms for DSU systems and their transformer programming that ease the programmer’s job while maintaining sufficient DSU runtime performance.