FV-2: Raft leader step-down on partition loss

- Add heartbeatReceived variable tracking last term with heartbeat
- Add Heartbeat action: leader sends keep-alive; recipient steps down on higher term
- Add HeartbeatTimeout: follower starts election if no heartbeat in current term
- Add LeaderLeaseExpired: leader steps down if it loses quorum connectivity
- Add LeaderHasSelfHeartbeat invariant: every leader must have valid heartbeat
- raft.tla now models realistic partition behavior (38M states verified)
- Update CHANGELOG -> v1.2.0, VERSION -> 1.2.0, PLAN.md, README.md

This commit is contained in:

dimgigov

2026-05-07 21:48:03 +03:00

parent 181e7d7019

commit 4791434cea

6 changed files with 97 additions and 11 deletions

									
										formal-verification/models/raft.cfg
									
		+1
		
												View File
												
				@@ -15,4 +15,5 @@ INVARIANTS

				  StateMachineSafety

				  CommittedIndexValid

				  LogMatching

				  LeaderHasSelfHeartbeat