This is a great write-up. Easily one of the most interesting posts I've seen on this subject, since Aphyr's last post.<p>Also nice to see things like:<p>> We noticed that the Jepsen test code didn’t actually check for negative balances, contradicting what has been previously written about it, so we fixed that.