Controller A records revocation epoch 12. Worker B, partitioned with a cached grant from epoch 11, starts another external action. The database is correct and the system is unsafe.
Source: [Dev.to](https://dev.to/robinzzz/treat-emergency-ai-revocation-as-a-distributed-protocol-1ed5)