anchor.diff:              node_debug("=> majority NOT present!", []),
               false
       end;
  -node_postcondition(_NodeState, {call, ?MODULE, set_fault, [_Node, _Value]}, ok) ->
  -    true;
   node_postcondition(_NodeState, {call, ?MODULE, wait, [_Node]}, _Result) ->
       true;
   node_postcondition(_NodeState, {call, ?MODULE, sleep, []}, _Result) ->
       true;
   node_postcondition(_NodeState, {call, ?MODULE, next_id, [_Node]}, {badrpc,timeout}) ->
  -    true;
  +    false;
   node_postcondition(_NodeState, {call, ?MODULE, next_id, [_Node]}, {badrpc, _}) ->
       %% badrpc is fine, timeout is acceptable if no write occurred.
       true;
  
positive.code: %% What should the initial node state be.
  node_initial_state() ->
      node_debug("initializing", []),
      #node_state{counter=0}.
  
  %% Names of the node functions so we kow when we can dispatch to the node
  %% pre- and postconditions.
  
negative.code:     ok.
  
  %% @private
  next_id(Node) ->
      ?PROPERTY_MODULE:command_preamble(Node, [next_id, Node]),
  
      Result = rpc:call(?NAME(Node), paxoid, next_id, [?GROUP], ?TIMEOUT),
      node_debug("next_id for node: ~p yieleded: ~p", [node(), Result]),
  
      % node_debug("sleeping 250ms...", []),
      % timer:sleep(250),
  
      ?PROPERTY_MODULE:command_conclusion(Node, [next_id, Node]),
  
  