We took the tradeoff in our product due to the strong performance upside. Our reasoning goes something like - whatever happened approximately at the edge of th

We took the tradeoff in our product due to the strong performance upside. Our reasoning goes something like - whatever happened approximately at the edge of the power-loss abyss is considered part of the explosion. We have never held out hope that we'd be able to get information to disk up until the last microsecond. Letting WAL roll us back a few transactions is not a huge deal for our customers. Even if this breaks logical consistency with regard to external systems. We have many degrees of "redo" and the back office is always going to be a thing in our line of business. We file this under the "edge cases not economically worth targeting" bucket and take our 2 ~free orders of magnitude.