Both machines must be running the same show, and must be able to prove it. - A content hash so a mismatch is detected before the show, not during it. - A push from the primary, with an explicit confirmation of what changed.
Both machines must be running the same show, and must be able to prove it.