Network failover was tested by pulling live links, not assumed

Each machine now reaches the network by two independent paths through two different switches.

That claim was tested rather than trusted. First a single link was unplugged: the connection stayed up and degraded gracefully, with no packet loss. Then the entire active path was pulled on all three machines at once — harder than the test called for.

Every machine failed over to its second path, the cluster never lost quorum, and packet loss to the gateway was zero throughout.