Show and tell : TRAINS: a leaderless, formally-verified total-order broadcast — \~2,400 lines of Rust, checked seven ways

Follow-up for anyone interested in the practical side: I wrote up trains-valkey, which puts an unmodified Valkey/Redis behind this ring for loss-free failover — the thing Sentinel gives up. Separate thread here: Show and tell: trains-valkey — loss-free Redis/Valkey failover via a total-order ring proxy (Rust)