

<!DOCTYPE html>

<html lang="en-US">
<head>
  <meta charset="UTF-8">
  <meta http-equiv="X-UA-Compatible" content="IE=Edge">

  <link rel="stylesheet" href="/distributed-lock-lab/assets/css/just-the-docs-default.css">

  <link rel="stylesheet" href="/distributed-lock-lab/assets/css/just-the-docs-head-nav.css" id="jtd-head-nav-stylesheet">

  <style id="jtd-nav-activation">
  
    .site-nav ul li a {
      background-image: none;
    }

  </style>

  

  
    <script src="/distributed-lock-lab/assets/js/vendor/lunr.min.js"></script>
  

  <script src="/distributed-lock-lab/assets/js/just-the-docs.js"></script>

  <meta name="viewport" content="width=device-width, initial-scale=1">

  



  <!-- Begin Jekyll SEO tag v2.9.0 -->
<title>distributed-lock-lab | A distributed lock is not what makes your critical section safe. Fencing tokens are. This project proves it by experiment.</title>
<meta name="generator" content="Jekyll v4.4.1" />
<meta property="og:title" content="distributed-lock-lab" />
<meta property="og:locale" content="en_US" />
<meta name="description" content="A distributed lock is not what makes your critical section safe. Fencing tokens are. This project proves it by experiment." />
<meta name="twitter:description" property="og:description" content="A distributed lock is not what makes your critical section safe. Fencing tokens are. This project proves it by experiment." />
<link rel="canonical" href="https://rednavis.github.io/distributed-lock-lab/assets/css/just-the-docs-head-nav.css" />
<meta property="og:url" content="https://rednavis.github.io/distributed-lock-lab/assets/css/just-the-docs-head-nav.css" />
<meta property="og:site_name" content="distributed-lock-lab" />
<meta property="og:type" content="website" />
<meta name="twitter:card" content="summary" />
<meta name="twitter:title" content="distributed-lock-lab" />
<script type="application/ld+json">
{"@context":"https://schema.org","@type":"WebPage","description":"A distributed lock is not what makes your critical section safe. Fencing tokens are. This project proves it by experiment.","headline":"distributed-lock-lab","url":"https://rednavis.github.io/distributed-lock-lab/assets/css/just-the-docs-head-nav.css"}</script>
<!-- End Jekyll SEO tag -->


  

</head>

<body>
  <a class="skip-to-main" href="#main-content">Skip to main content</a>
  <svg xmlns="http://www.w3.org/2000/svg" class="d-none">
  <symbol id="svg-link" viewBox="0 0 24 24">
  <title>Link</title>
  <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-link">
    <path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"></path><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"></path>
  </svg>
</symbol>

  <symbol id="svg-menu" viewBox="0 0 24 24">
  <title>Menu</title>
  <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-menu">
    <line x1="3" y1="12" x2="21" y2="12"></line><line x1="3" y1="6" x2="21" y2="6"></line><line x1="3" y1="18" x2="21" y2="18"></line>
  </svg>
</symbol>

  <symbol id="svg-arrow-right" viewBox="0 0 24 24">
  <title>Expand</title>
  <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-chevron-right">
    <polyline points="9 18 15 12 9 6"></polyline>
  </svg>
</symbol>

  <!-- Feather. MIT License: https://github.com/feathericons/feather/blob/master/LICENSE -->
<symbol id="svg-external-link" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-external-link">
  <title id="svg-external-link-title">(external link)</title>
  <path d="M18 13v6a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V8a2 2 0 0 1 2-2h6"></path><polyline points="15 3 21 3 21 9"></polyline><line x1="10" y1="14" x2="21" y2="3"></line>
</symbol>

  
    <symbol id="svg-doc" viewBox="0 0 24 24">
  <title>Document</title>
  <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-file">
    <path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline>
  </svg>
</symbol>

    <symbol id="svg-search" viewBox="0 0 24 24">
  <title>Search</title>
  <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="feather feather-search">
    <circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line>
  </svg>
</symbol>

  
  
    <!-- Bootstrap Icons. MIT License: https://github.com/twbs/icons/blob/main/LICENSE.md -->
<symbol id="svg-copy" viewBox="0 0 16 16">
  <title>Copy</title>
  <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="currentColor" class="bi bi-clipboard" viewBox="0 0 16 16">
    <path d="M4 1.5H3a2 2 0 0 0-2 2V14a2 2 0 0 0 2 2h10a2 2 0 0 0 2-2V3.5a2 2 0 0 0-2-2h-1v1h1a1 1 0 0 1 1 1V14a1 1 0 0 1-1 1H3a1 1 0 0 1-1-1V3.5a1 1 0 0 1 1-1h1v-1z"/>
    <path d="M9.5 1a.5.5 0 0 1 .5.5v1a.5.5 0 0 1-.5.5h-3a.5.5 0 0 1-.5-.5v-1a.5.5 0 0 1 .5-.5h3zm-3-1A1.5 1.5 0 0 0 5 1.5v1A1.5 1.5 0 0 0 6.5 4h3A1.5 1.5 0 0 0 11 2.5v-1A1.5 1.5 0 0 0 9.5 0h-3z"/>
  </svg>
</symbol>
<symbol id="svg-copied" viewBox="0 0 16 16">
  <title>Copied</title>
  <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="currentColor" class="bi bi-clipboard-check-fill" viewBox="0 0 16 16">
    <path d="M6.5 0A1.5 1.5 0 0 0 5 1.5v1A1.5 1.5 0 0 0 6.5 4h3A1.5 1.5 0 0 0 11 2.5v-1A1.5 1.5 0 0 0 9.5 0h-3Zm3 1a.5.5 0 0 1 .5.5v1a.5.5 0 0 1-.5.5h-3a.5.5 0 0 1-.5-.5v-1a.5.5 0 0 1 .5-.5h3Z"/>
    <path d="M4 1.5H3a2 2 0 0 0-2 2V14a2 2 0 0 0 2 2h10a2 2 0 0 0 2-2V3.5a2 2 0 0 0-2-2h-1v1A2.5 2.5 0 0 1 9.5 5h-3A2.5 2.5 0 0 1 4 2.5v-1Zm6.854 7.354-3 3a.5.5 0 0 1-.708 0l-1.5-1.5a.5.5 0 0 1 .708-.708L7.5 10.793l2.646-2.647a.5.5 0 0 1 .708.708Z"/>
  </svg>
</symbol>

  
</svg>

  
    <div class="side-bar">
  <div class="site-header" role="banner">
    <a href="/distributed-lock-lab/" class="site-title lh-tight">
  distributed-lock-lab

</a>
    <button id="menu-button" class="site-button btn-reset" aria-label="Toggle menu" aria-pressed="false">
      <svg viewBox="0 0 24 24" class="icon" aria-hidden="true"><use xlink:href="#svg-menu"></use></svg>
    </button>
  </div>

  <nav aria-label="Main" id="site-nav" class="site-nav">
  
  
    <ul class="nav-list"><li class="nav-list-item"><a href="/distributed-lock-lab/" class="nav-list-link">Home</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/CONTRIBUTING.html" class="nav-list-link">Contributing</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/AGENTS.html" class="nav-list-link">AI contributors</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/ROADMAP.html" class="nav-list-link">Roadmap</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/tasks/README.html" class="nav-list-link">Task board</a></li><li class="nav-list-item"><button class="nav-list-expander btn-reset" aria-label="toggle items in Documentation category" aria-pressed="false">
        <svg viewBox="0 0 24 24" aria-hidden="true"><use xlink:href="#svg-arrow-right"></use></svg>
      </button><a href="/distributed-lock-lab/docs/README.html" class="nav-list-link">Documentation</a><ul class="nav-list"><li class="nav-list-item"><a href="/distributed-lock-lab/docs/00-charter.html" class="nav-list-link">00 Charter</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/01-requirements.html" class="nav-list-link">01 Requirements</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/02-domain-model.html" class="nav-list-link">02 Domain model</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/03-architecture.html" class="nav-list-link">03 Architecture</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/04-contracts.html" class="nav-list-link">04 Contracts index</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/05-infrastructure.html" class="nav-list-link">05 Infrastructure</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/06-observability-and-slo.html" class="nav-list-link">06 Observability and SLO</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/07-correctness-and-testing.html" class="nav-list-link">07 Correctness and testing</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/08-operations.html" class="nav-list-link">08 Operations</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/09-risks.html" class="nav-list-link">09 Risks</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/10-delivery-plan.html" class="nav-list-link">10 Delivery plan</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/11-glossary.html" class="nav-list-link">11 Glossary</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/12-parallelization-map.html" class="nav-list-link">12 Parallelization map</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/contracts/C1-database-schemas.html" class="nav-list-link">C1 Database schemas</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/contracts/C2-java-api.html" class="nav-list-link">C2 Java API</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/contracts/C3-http-surfaces.html" class="nav-list-link">C3 HTTP surfaces</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/contracts/C4-observability.html" class="nav-list-link">C4 Observability</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/contracts/C5-config-build-and-naming.html" class="nav-list-link">C5 Config, build, naming</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/adr/ADR-000-template.html" class="nav-list-link">ADR-000 — Template {#adr0}</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/adr/ADR-001-etcd-as-the-consensus-store.html" class="nav-list-link">ADR-001 — etcd as the consensus store {#adr1}</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/adr/ADR-002-fencing-token-source.html" class="nav-list-link">ADR-002 — Fencing token source: ModRevision captured at grant time {#adr2}</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/adr/ADR-003-two-databases-two-instances.html" class="nav-list-link">ADR-003 — lockdb and paydb are separate databases on separate Cloud SQL instances {#adr3}</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/adr/ADR-004-payout-executor-as-the-protected-operation.html" class="nav-list-link">ADR-004 — The protected operation is a payout execution, not a balance update {#adr4}</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/adr/ADR-005-gke-autopilot-eviction-as-budgeted-unavailability.html" class="nav-list-link">ADR-005 — GKE Autopilot: evictions accepted as budgeted unavailability {#adr5}</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/adr/ADR-006-conservative-client-side-expiry.html" class="nav-list-link">ADR-006 — Conservative client-side lease expiry {#adr6}</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/adr/ADR-007-rail-fencing-proxy-for-a-non-cas-resource.html" class="nav-list-link">ADR-007 — A fencing proxy in front of a resource with no CAS {#adr7}</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/adr/ADR-008-terraform-layout-state-and-provider-versions.html" class="nav-list-link">ADR-008 — Terraform layout, remote state, and pinned provider versions {#adr8}</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/adr/ADR-009-managed-prometheus-and-slos-in-terraform.html" class="nav-list-link">ADR-009 — Managed Prometheus, and SLOs that live in the infrastructure repo {#adr9}</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/adr/ADR-010-monorepo-single-gradle-build.html" class="nav-list-link">ADR-010 — One repository, one Gradle build, one version list {#adr10}</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/adr/ADR-011-no-git-initialisation-yet.html" class="nav-list-link">ADR-011 — Version control and publication are deliberately deferred {#adr11}</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/adr/ADR-012-git-and-public-publication.html" class="nav-list-link">ADR-012 — Git version control and public publication {#adr12}</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/adr/ADR-013-parallel-contribution-model.html" class="nav-list-link">ADR-013 — Parallel contribution replaces strict sequencing {#adr13}</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/docs/adr/ADR-014-apache-2-and-dco.html" class="nav-list-link">ADR-014 — Apache-2.0 with DCO sign-off {#adr14}</a></li></ul></li><li class="nav-list-item"><a href="/distributed-lock-lab/GOVERNANCE.html" class="nav-list-link">Governance</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/SECURITY.html" class="nav-list-link">Security</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/SUPPORT.html" class="nav-list-link">Support</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/CODE_OF_CONDUCT.html" class="nav-list-link">Code of Conduct</a></li><li class="nav-list-item"><a href="/distributed-lock-lab/MAINTAINERS.html" class="nav-list-link">Maintainers</a></li></ul>
  
</nav>




  
  
    <footer class="site-footer">
      This site uses <a href="https://github.com/just-the-docs/just-the-docs">Just the Docs</a>, a documentation theme for Jekyll.
    </footer>
  
</div>

  
  <div class="main" id="top">
    <div id="main-header" class="main-header">
  
    

<div class="search" role="search">
  <div class="search-input-wrap">
    <input type="text" id="search-input" class="search-input" tabindex="0" placeholder="Search distributed-lock-lab" aria-label="Search distributed-lock-lab" autocomplete="off">
    <label for="search-input" class="search-label"><svg viewBox="0 0 24 24" class="search-icon"><use xlink:href="#svg-search"></use></svg></label>
  </div>
  <div id="search-results" class="search-results"></div>
</div>

  
  
  
    <nav aria-label="Auxiliary" class="aux-nav">
  <ul class="aux-nav-list">
    
      <li class="aux-nav-list-item">
        <a href="https://github.com/rednavis/distributed-lock-lab" class="site-button"
          
          target="_blank" rel="noopener noreferrer"
          
        >
          View on GitHub
        </a>
      </li>
    
  </ul>
</nav>

  
</div>

    <div class="main-content-wrap">
      
      <div id="main-content" class="main-content">
        <main>
          
            <h.site-nav ul li a {
  background-image: linear-gradient(-90deg, rgb(12.4052287582%, 12.0871459695%, 13.6775599129%) 0%, rgba(12.4052287582%, 12.0871459695%, 13.6775599129%, 0.8) 80%, rgba(12.4052287582%, 12.0871459695%, 13.6775599129%, 0) 100%);
}

          

          
            
          
        </main>
        

  <hr>
  <footer>
    
      <p><a href="#top" id="back-to-top">Back to top</a></p>
    

    <p class="text-small text-grey-dk-100 mb-0">Apache-2.0. The domain modelled here is fictional; every number is a labelled assumption. <strong>Not production-ready</strong> &mdash; see SECURITY.md.</p>

    
  </footer>


      </div>
    </div>
    
      

<div class="search-overlay"></div>

    
  </div>

  
</body>
</html>

