{"id":"protocol-safety-validated-only-under-synchronous-model","text":"Distributed protocol safety properties are validated exclusively under synchronous simulation (deterministic tick-based delivery, no real network I/O), but the most critical failure mode — network partitions creating stale-leader write acceptance and forced re-elections — is inherently asynchronous, creating an untested gap between modeled and real-world safety.","truth_value":"IN","source":"","source_url":"","source_hash":"","justifications":[{"type":"SL","antecedents":["distributed-protocols-simulate-synchronous-delivery","raft-partition-creates-dual-hazard"],"outlist":[],"label":"Partition hazards are modeled but only tested under instant delivery — async timing effects remain unvalidated"}],"dependents":["consensus-safety-unverified-across-optimization-variants","protocol-safety-unfalsifiable-under-current-testing","testing-covers-neither-crash-nor-async-failure-modes"],"metadata":{"last_reviewed":"2026-05-30T09:01:17","review_result":"pass"},"created_at":"","updated_at":"","reviewed_at":"","verified_at":"","retracted_at":"","explanation":{"steps":[{"node":"protocol-safety-validated-only-under-synchronous-model","truth_value":"IN","reason":"SL justification valid","antecedents":["distributed-protocols-simulate-synchronous-delivery","raft-partition-creates-dual-hazard"],"label":"Partition hazards are modeled but only tested under instant delivery — async timing effects remain unvalidated"},{"node":"distributed-protocols-simulate-synchronous-delivery","truth_value":"IN","reason":"SL justification valid","antecedents":["pbft-submit-request-is-synchronous-simulation","bully-synchronous-delivery","lamport-send-delivers-synchronously"],"label":"three independent protocol modules share the same synchronous-delivery simplification"},{"node":"pbft-submit-request-is-synchronous-simulation","truth_value":"IN","reason":"premise"},{"node":"bully-synchronous-delivery","truth_value":"IN","reason":"premise"},{"node":"lamport-send-delivers-synchronously","truth_value":"IN","reason":"premise"},{"node":"raft-partition-creates-dual-hazard","truth_value":"IN","reason":"SL justification valid","antecedents":["raft-stale-leader-accepts-writes","raft-rejoin-forces-election"],"label":"Two partition-related behaviors combine into a scenario where partitions cause both silent data loss AND unnecessary leader disruption on heal"},{"node":"raft-stale-leader-accepts-writes","truth_value":"IN","reason":"premise"},{"node":"raft-rejoin-forces-election","truth_value":"IN","reason":"premise"}]}}