Counterexample: a connector grant is revoked at epoch 8, but an import message created under epoch 7 is delayed. The primary store deletes its copy, then the delayed consumer writes a derived card back into a cache. Every component “worked,” yet the system did not converge on revoked.
Source: [Dev.to](https://dev.to/robinzzz/treat-health-data-revocation-as-a-distributed-convergence-protocol-nn7)