# On Mixing Eventual and Strong Consistency: Acute Cloud Types

## TL;DR

This paper introduces acute cloud types (ACTs), a formal model for distributed systems that combine eventual and strong consistency, highlighting unique phenomena and impossibility results in mixed-consistency systems.

## Contribution

It formalizes ACTs, demonstrates their properties, and proves an impossibility result regarding operation reordering in mixed-consistency systems.

## Key findings

- ACTs enable efficient quorum-based protocols like Paxos.
- Temporary operation reordering can cause interim disagreements.
- Strengthening semantics can weaken guarantees on eventual consistency.

## Abstract

In this article we study the properties of distributed systems that mix eventual and strong consistency. We formalize such systems through acute cloud types (ACTs), abstractions similar to conflict-free replicated data types (CRDTs), which by default work in a highly available, eventually consistent fashion, but which also feature strongly consistent operations for tasks which require global agreement. Unlike other mixed-consistency solutions, ACTs can rely on efficient quorum-based protocols, such as Paxos. Hence, ACTs gracefully tolerate machine and network failures also for the strongly consistent operations. We formally study ACTs and demonstrate phenomena which are neither present in purely eventually consistent nor strongly consistent systems. In particular, we identify temporary operation reordering, which implies interim disagreement between replicas on the relative order in which the client requests were executed. When not handled carefully, this phenomenon may lead to undesired anomalies, including circular causality. We prove an impossibility result which states that temporary operation reordering is unavoidable in mixed-consistency systems with sufficiently complex semantics. Our result is startling, because it shows that apparent strengthening of the semantics of a system (by introducing strongly consistent operations to an eventually consistent system) results in the weakening of the guarantees on the eventually consistent operations.