Viewstamped Replication-backed Concord engine.

Commands use a stable VSR client session. Queries use quorum-confirmed read barriers, so they remain linearizable without appending to the replicated log or sharing the client's one-outstanding-command limit.