One nuance I keep seeing is that each individual update is valid, but the invariant only breaks after a specific sequence of events. That’s where things get tr

One nuance I keep seeing is that each individual update is valid, but the invariant only breaks after a specific sequence of events. That’s where things get tricky to reason about upfront.