Corosync

Corosync redundancy is a claim until you cut the link: one wrong key, 13 seconds without quorum

A hand-edited link priority parsed as inert text while every status tool reported both links healthy. Pulling the virtual cable was the only check that answered.