The problem with Jepsen is that it can prove that systems are unsafe, but it can&#x27;t be used to prove that systems are safe.<p>For example Consul did their own Jepsen testing[1] in which they passed them, but Kyle pointed out [2] that they passed them only because they changed timeouts from 1 s to 300 ms effectively making the race condition window smaller.<p>[1] <a href="https:&#x2F;&#x2F;www.consul.io&#x2F;docs&#x2F;internals&#x2F;jepsen.html" rel="nofollow">https:&#x2F;&#x2F;www.consul.io&#x2F;docs&#x2F;internals&#x2F;jepsen.html</a>
[2] <a href="https:&#x2F;&#x2F;aphyr.com&#x2F;posts&#x2F;316-call-me-maybe-etcd-and-consul" rel="nofollow">https:&#x2F;&#x2F;aphyr.com&#x2F;posts&#x2F;316-call-me-maybe-etcd-and-consul</a>