It is possible for rollback to happen on the sync source and the initial sync member must be able to detect and react to this possibility.

One way might be to keep track of the rollback count per sync source at the start, and verify at each stage to ensure the no rollback has occurred.