A Distributed Lock Without Fencing Can Let a Dead Worker Come Back and Corrupt State
A lease can expire while its old owner is paused rather than dead. If that process later resumes, the lock service may have moved on—but the storage system can still accept stale writes unless it has a fencing mechanism.