Archived
A controller that lost its lease to a stalled bus exited and was started again five seconds later, asserting every bucket and consumer on the bus that had just stalled; a start that could not assert the lease bucket exited at once, into the same loop. A candidate now waits one key's age after the newest epoch lost in the last ten minutes, doubled per further loss, at most two minutes, before it touches the bus; and retries its stand in-process from 5 s doubling to 60 s instead of exiting.