How we mathematically tested state supersession, silent gap evaporation, and idempotent replay to build a crash-proof event engine.