appendfsync always + no-appendfsync-on-rewrite no guarantees every write is fsynced. Pair with a synchronous replica and min-replicas-to-write 1 + min-replicas-max-lag 0. Accept the latency tradeoff (~1–2ms per write).