crash-testing
Conformance proofs for background work that must survive lost messages, dead workers and uncertain external calls.