Step 6c covered probing, death voting, and self-termination, but not operational cleanup outside 6c's scope, and not rolling-upgrade capability. design/cluster.md's Gap section names both as uncovered; its "Rolling upgrades" section states the current boundary — no-downtime upgrades with incompatible changes are not supported (reason: design/architecture.md).
Spec: design/cluster.md ("Rolling upgrades" and the Gap section).
Acceptance
- The design for both is written first (in design/cluster.md), then implemented and covered by simulation tests.
Step 6c covered probing, death voting, and self-termination, but not operational cleanup outside 6c's scope, and not rolling-upgrade capability. design/cluster.md's Gap section names both as uncovered; its "Rolling upgrades" section states the current boundary — no-downtime upgrades with incompatible changes are not supported (reason: design/architecture.md).
Spec: design/cluster.md ("Rolling upgrades" and the Gap section).
Acceptance