In the mode where a client is responsible to move writes from 'pending' to 'good', it wasn't clear to me what happens if the client dies before contacting all servers in the second pass?
Does the data remain stable, or must some additional work be performed to correct the inconsistent state?