Metastability as a failed conditional discharge of rely-guarantee composition

This blog post explores metastability in systems, specifically focusing on a retry storm scenario using TLA+ modeling. It analyzes how a system can fail due to conditions not being met and discusses solutions to prevent such issues by implementing stricter rules on retries and service order. The author emphasizes the importance of compositional specification to clarify contracts between system components and identify where guarantees may fail.