System design notes — sharded write path

Cap throughput at 10k qps per shard; use read replicas.

• Partition key: tenant_id.
• Replication: synchronous to one replica, asynchronous to two.
• Failover: leader election via etcd in <5s.