Fault Injection

Operator tests a 3-node consensus cluster. Antithesis can partition the simulated network to isolate a node.

Let the platform inject network partitions (split-brain, asymmetric reachability) as part of exploration and assert safety (no two leaders, no committed-then-lost writes) holds across them. Partitions are deterministically injected and reproducible, so a violation found under partition replays exac…

The protocol assumes messages mostly arrive in order. Antithesis can delay and reorder messages.

Inject latency, reordering, and duplication of messages so the protocol is tested under realistic adversarial networks, and assert it tolerates them (idempotent handlers, correct sequencing). Distributed protocols frequently assume ordering they are not guaranteed; let the simulator violate those a…

Operator wants to inject faults into a third-party cloud API the SUT calls over the real internet.

Pull external dependencies inside the simulated environment (a container stub) so faults can be injected into them deterministically — the platform injects faults into the simulated system it controls, not the real external internet. Model the external API as an in-sim component if you need to faul…