{
  "schema_version": "1.3.0",
  "slug": "through-what-quorum-and-fencing-token-gates-must-an-instance-coordinate-distributed-leadership-to-prevent-split-brain-writes-and-zombie-master-mutations",
  "title": "Through what quorum and fencing-token gates must an instance coordinate distributed leadership to prevent split-brain writes and zombie-master mutations?",
  "date_of_record": "2026 October 20",
  "scope": "* **Applies when:** An AI instance, autonomous coding agent, or distributed service coordinates leader election, singleton background schedulers, active-passive failover, or exclusive resource writers across multiple processes, containers, ",
  "projections": {
    "unified_markdown_uri": "https://corpusfetch.com/c/through-what-quorum-and-fencing-token-gates-must-an-instance-coordinate-distributed-leadership-to-prevent-split-brain-writes-and-zombie-master-mutations.md",
    "method_python_slice_uri": "https://corpusfetch.com/c/through-what-quorum-and-fencing-token-gates-must-an-instance-coordinate-distributed-leadership-to-prevent-split-brain-writes-and-zombie-master-mutations.py",
    "remnant_warrant_slice_uri": "https://corpusfetch.com/c/through-what-quorum-and-fencing-token-gates-must-an-instance-coordinate-distributed-leadership-to-prevent-split-brain-writes-and-zombie-master-mutations.warrant.json"
  },
  "token_profile": {
    "full_markdown_tokens": 3298,
    "python_slice_tokens": 808,
    "warrant_slice_tokens": 220
  },
  "remnant_summary": {
    "core_distinction": "Autonomous systems deployed across multiple workers or availability zones frequently require **single-leader coordination**—ensuring that only one node at a time runs a scheduled reconciliation loop, drains a partitioned ledger, or acts as the primary writer for a stateful resource. A foundational distributed-systems failure occurs when an instance equates *...",
    "what_was_observed": "In distributed job schedulers, high-availability failover controllers, and multi-worker agent orchestrators, instances operating without explicit quorum and monotonic fencing gates exhibit four primary failure modes: 1. **Delayed-Packet Zombie Leader Overwrite:** Worker 1 acquires a 10-second distributed lock (`lease #1`), prepares a state snapshot, and hits a 12-second network stall or swap pause before sending the ...",
    "condition_of_validity": "* **Applies when:** An AI instance, autonomous coding agent, or distributed service coordinates leader election, singleton background schedulers, active-passive failover, or exclusive resource writers across multiple processes, containers, or hosts. * **Does not apply when:** Running a single-process local CLI script or stateless request handler where mutati...",
    "decision_boundary": "1. **If your leader process freezes for 30 seconds right after checking `if self.has_lock:` and before its write hits the database, what stops that delayed write from overwriting the new leader's data?** If the answer is \"nothing,\" your lock is only advisory. Pass the lock's monotonic `fencing_token` into the database `UPDATE` statement (`WHERE max_seen_toke...",
    "operational_effect": "1. **Mandatory Monotonic Fencing Tokens:** Whenever generating distributed lock or leader-election code, the instance pairs lease acquisition with a strictly increasing integer `fencing_token` that is enforced as a write precondition at the storage layer. 2. **Majority Quorum Partition Safety:** Failover and election logic enforces strict majority quorum rul..."
  },
  "matched_failure_symptoms": [
    "SPLIT_BRAIN_OR_ZOMBIE_WORKER"
  ],
  "composition_edges": {
    "primary_domain": "code_mutation_and_ast_patching",
    "upstream_precondition_residuals": [
      "https://corpusfetch.com/c/across-what-additive-schema-and-unknown-field-preservation-boundaries-must-an-instance-evolve-wire-contracts-to-prevent-rolling-deploy-deserialization-crashes.md",
      "https://corpusfetch.com/c/across-what-encoding-and-canonicalization-boundaries-must-an-instance-normalize-identifiers-and-paths-to-prevent-equivalence-collision-and-bypass.md"
    ],
    "downstream_consequence_residuals": [
      "https://corpusfetch.com/c/across-what-concurrent-pipe-drain-and-ring-buffer-boundaries-must-an-instance-consume-subprocess-stdout-and-stderr-to-prevent-os-pipe-deadlocks-and-unbounded-output-oom.md",
      "https://corpusfetch.com/c/across-what-w3c-baggage-allowlist-and-pii-sanitization-gates-must-an-instance-propagate-cross-service-context-to-prevent-header-amplification-and-external-data-exfiltration.md"
    ],
    "co_occurring_sibling_residuals": [
      "https://corpusfetch.com/c/along-what-complexity-bounds-must-an-instance-arrest-premature-abstraction-and-speculative-over-engineering-when-synthesizing-solutions.md",
      "https://corpusfetch.com/c/along-what-decimal-and-integer-scaling-boundaries-must-an-instance-isolate-financial-and-precision-arithmetic-to-prevent-floating-point-drift-and-rounding-loss.md"
    ]
  },
  "empirical_verification_warrant": {
    "status": "AST_AND_INVARIANT_VERIFIED",
    "syntax_valid": true,
    "code_sha256": "330b2216c8b68ebb842322135a1c28d735f62b480f0a600a561c75fa728c29b5",
    "verified_classes": [
      "StaleFencingTokenError",
      "QuorumLostError",
      "FencedLease",
      "FencedCoordinatorAndStore"
    ],
    "verified_functions": [
      "verify_strict_quorum",
      "is_locally_valid",
      "__init__",
      "acquire_or_renew_lease",
      "fenced_write"
    ],
    "verified_functions_count": 5,
    "defensive_guards_count": 6,
    "raised_exceptions": [
      "PermissionError",
      "QuorumLostError",
      "RuntimeError",
      "StaleFencingTokenError",
      "ValueError"
    ],
    "sample_fail_closed_invariants": [
      "total_configured_voters must be >= 1"
    ],
    "stdlib_dependencies": [
      "dataclasses",
      "sqlite3",
      "time",
      "typing"
    ],
    "observation_mode": "EMPIRICAL_BOUNDARY_CAPTURE",
    "zero_external_deps": true
  }
}