moreconsensus is a Go library for building replicated services with Egalitarian Paxos (EPaxos). Applications drive a deterministic RawNode, persist Ready records, send transport messages, apply committed commands, and acknowledge the exact Ready prefix with Advance.
- EPaxos fast path, slow accept path, commit broadcast, and owner-independent recovery.
- Deterministic logical ticks for protocol timing.
- Caller-owned storage and transport virtualization.
- Safe-copy and explicit zero-copy ownership paths.
- Pool-aware message and command helpers.
- Canonical BLAKE3 checksums for records and messages.
- Deterministic simulation coverage for cluster sizes 1 through 7.
- A Pebble-backed distributed key-value example in its own Go module.
- Separate client, peer, and administrative service planes with TLS 1.3 mutual-authentication support.
- Repository gates for Go behavior, race testing, bounded finite model checking, fault simulation, and release-scope audits.
- EPAXOS.MD describes the implemented algorithm and public execution model.
- EPAXOS_IMPLEMENTATION_PROOF.md explains property claims, failure-count boundaries, proof rationale, and evidence limits.
- MODEL_EQ_REPORT.MD maps finite TLA+ models to implementation behavior and direct tests.
- RELEASE_SCOPE.md is the self-contained release-scope authority for closed items, open items, and non-claims.
- release/EPAXOS_READINESS_EVIDENCE.md records the current evidence snapshot and release-gate result.
- tla contains the finite model suite; tests contains verification and release-audit commands.
- examples/kv contains the key-value integration example.
- jepsen contains the workload harness for separately approved external validation.
- The key-value example includes local lifecycle and deterministic fault procedures under
tests; these reports remain bounded verification evidence.
- The production library surface is
gosuda.org/moreconsensus/epaxos; the key-value service is an integration example and validation harness, not a multi-tenant product. - Voter sets support one through seven replicas. The core uses deterministic logical time; explicit TOQ inputs and operational clock discipline remain embedder responsibilities.
- Formal evidence is finite model checking plus focused executable tests. It is not an exhaustive or unbounded proof, and it does not establish real-network production readiness.
- Retention and checkpoint features provide bounded operational behavior; certified protocol-state compaction remains governed by RELEASE_SCOPE.md.
The main module is gosuda.org/moreconsensus. Example dependencies are isolated in example modules and included by the committed Go workspace.