Extend raft_sim.c's deterministic TLA+-conformance harness with two fault-injectable checks: no reaction before commit, and idempotent re-apply of an already-committed entry. Wired as dedicated tests only, not into raft_sim_check_all's fixed four-invariant contract (owned by a separate spec). RED/GREEN independently verified by adversarial review; zero regression to existing scenario functions. |
||
|---|---|---|
| .. | ||
| settings | ||
| specs | ||
| steering | ||