Currently, TenantMigrationAccessBlocker::abort has an invariant that the migration must have started blocking reads and writes when the migration aborts. That invariant should be removed because the migration could abort in any state. It could abort if it couldn’t find the recipient host when sending the first recipientSyncData so that case _access would kAllow.