Intel Report 060: State Convergence

SUMMARY: State convergence is the measurable condition in which connected systems agree on the current authoritative state and stop acting on superseded versions. It turns consistency from an assumption into an operational claim that can be tested.

Distributed systems rarely change at the same moment. A source commits an update, subscribers receive it at different speeds, offline recipients reconnect later, and derived services recalculate on separate schedules. Temporary disagreement may be expected. Unbounded disagreement is governance failure.

Agreement Requires an Authority Rule

Convergence begins by naming the authoritative record, version scheme, and conflict rule. Without them, two systems can hold different values while each reasonably claims to be current. Timestamps alone are weak evidence when clocks drift, events arrive out of order, or an older update is replayed.

Data lineage supplies the missing context. A recipient should know the source identifier, source version, transformation, and effective time behind the value it enforces. That record makes disagreement diagnosable instead of mysterious.

Delivery Does Not Prove Convergence

A message broker can report successful delivery while an application rejects the update, a cache preserves an older response, or a derived score remains unchanged. Convergence requires evidence from the point of consequence, not merely from the transport layer.

Status propagation maps where a decision travels. The same map should report the version currently applied at every consequential recipient. A missing version is not a harmless observability gap; it is an unknown authority state.

The Convergence Window Is a Service Property

Each status class should have a bounded convergence window based on consequence. A cosmetic label may tolerate minutes. A revoked credential, restored entitlement, or corrected safety status may require seconds. The acceptable window belongs in the service contract alongside availability and latency.

The observed window includes correction lag, delayed recipients, reconciliation intervals, cache invalidation, and derived-state rebuilds. Measuring only the fastest path conceals the systems most likely to preserve obsolete authority.

Convergence Ends With Proof

A completion record should list the expected recipients, their applied versions, unresolved exceptions, and a test of the real participant route. Historical artifacts may retain the superseded value, but they must be marked as history and prevented from reentering operational decisions.

Intel assessment: connected systems do not share truth merely because they share data; they share truth when every consequential route can prove which version governs now.