TSM's 0-Second Double Commit Disaster