For those interested in this sort of thing, see also Raft's TLA+ specification: https://github.com/ongardie/raft.tla