Nine elders lived at Qingyuan Temple. The temple had one iron rule: any weighty matter — admitting a disciple, opening the grain store, amending the precepts — had to be written into the single Ledger, and it counted only if more than half of the elders pressed their handprint on it in person. Almost-half would not do. Exactly half would not do. It had to be more than half — at least five prints.

In ordinary times the rule seemed tedious. One elder grumbled that just rounding up five prints out of nine could eat half a day. The old abbot only replied, “Slow is fine. What I fear is two ledgers.”

That summer a flood tore out the stone bridge in front of the temple. With the bridge gone, the temple was split clean in two: five elders on the east side, four trapped on the west, the swollen river between them too loud to shout across.

The west side panicked. “The grain store is on our side — let’s open it now!” one urged. But another stopped him: “There are only four of us. By the rule, four cannot press this entry.” They counted and recounted; they could never reach more than half. So the west side made what looked like a spineless decision — they transacted nothing at all. They simply chanted, swept, and cooked as before, and locked the Ledger away untouched. They would rather “be unable to act for now” than dare start a second ledger of their own.

The east side had five. Five is more than half. So the east carried on — admitting disciples, opening the store, holding council — every entry gathering its full set of prints, the Ledger filling page by page.

A month later the water fell and the bridge was rebuilt. The elders of both sides met and opened their books. The west’s book stopped on the day of the flood, not a word added; the east’s was full of a month’s affairs. Laid together, the two joined seamlessly, without a single conflict. Stroking his beard, the abbot said, “You see — thank heaven the west held back. Had they kept their own ledger too, we would now have two Ledgers that refuse to recognize each other, and this temple would be finished.”

— By now you’ve probably recognized it: Qingyuan Temple is really about quorum in distributed systems, and how it prevents split-brain.

Concept In strongly-consistent systems like etcd, Raft, and ZooKeeper, a cluster of N nodes can commit any write only with confirmation from a quorum — a strict majority, ⌊N/2⌋+1 nodes. The elegance is this: no matter how a network partition slices the cluster, at most one partition can hold a majority at the same time. The side holding the majority keeps writing; the side short of a majority voluntarily stops accepting writes and goes read-only / unavailable. That guarantees you never get two partitions each writing their own history that can’t later be merged — i.e. split-brain. It is fundamentally the CAP trade-off: sacrifice the minority’s availability to preserve consistency. It’s also why cluster sizes are usually odd (3, 5, 7): 5 nodes tolerate 2 failures, and 6 nodes also tolerate only 2 — the extra node adds cost without adding fault tolerance.

Metaphor mapping

• Nine elders → the N nodes in the cluster (e.g. etcd’s 5 members)
• The single Ledger → the replicated log / consistent data of the state machine
• “must have more than half of the prints” → the quorum write rule (⌊N/2⌋+1)
• Flood breaking the bridge → a network partition
• East side of five, still writing → the majority partition holding quorum, still accepting writes
• West side of four, locked and read-only → the minority partition self-demoting, trading availability for consistency
• The two ledgers merging without conflict → logs consistent after the partition heals, no split-brain
• Abbot’s fear of “two ledgers” → the designer’s core fear of split-brain
• Preferring an odd number of elders → clusters using odd node counts to optimize fault-tolerance cost