A fencing token guards against a stale leader
A lease can expire while its holder is paused, yet the old process can resume and send a delayed write. The storage service needs a way to reject superseded ownership. A fencing token supplies an ordered ownership epoch that travels with each mutation. Its protection depends on the resource checking the token, not merely on a lock service issuing one. ...