Four property-style raft tests proving the PreVote API preserves the safety invariants: term/voted_for/role never change and on_persist never fires across mixed begin/request/reply sequences (WON and LOST); a WON round creates no leader (stays FOLLOWER); and the real-vote higher-term-adopt + step-down + quorum-elect path is unchanged (bug-339/340 intact). Records the TLA+/checklist consistency argument (RN-1) in test_raft.c and research.md, citing the tests as evidence. Raft suite 123/0/0; zero production change. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| settings | ||
| specs | ||
| steering | ||