TLA+ spec + design: LCG majority-loss disaster recovery orchestration

    • Type: Task
    • Resolution: Unresolved
    • Priority: Major - P3
    • None
    • Affects Version/s: None
    • Component/s: None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Companion artifact for SLS-5021.

      5-node LCG model with 3 invariants. Bug cfg: write LSN 1 to

      {n1,n2,n3} → snapshot n1 → lose {n1,n2,n3}

      → recover without attestation → survivors

      {n4,n5}

      empty + snapshot 0, but committed=

      {1}

      → invariant fails. Snapshots from lost nodes preserved (S3 outlives node).

      Files in worktree mongo-w5-3:

      • src/mongo/tla_plus/Disagg/LCGMajorityLossRecovery/
      • src/mongo/db/SLS-5021-DESIGN.md

      Status: Draft.

            Assignee:
            Unassigned
            Reporter:
            Mehar Grewal
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: