Fig 4What if the cloud disappeared for an hour?L C R O · spacecut · serving 3 · unknown 1 · levers 0/3 · next token→hub · change not applied
Link breaker, change lever, recover button, outage dial: the four knobs, all liveLarge plate: the data plane. Small plinth: the control planeThree lane dials: a token, a job and a certificate that the control plane would renewThe link is cut. resolver, hub and job keep serving on the data plane's own power. Nothing on the console reaches the line: 0 of 3 levers live, and the gauges read UNKNOWN even where a lane is fine. The change attempt travels to the cut and stops there: not applied. What becomes of it when the link returns (queued, retried, dropped) is UNKNOWN. If the outage outlasts the token (a token the hub lane must present), the hub lane's gate drops. How long that takes in real time is UNKNOWN. The edge lane is drawn UNKNOWN: whether it keeps serving depends on its provider and was not tested.