> Thank you! That is very helpful. I had seen the MOVE SET command, but
> hadn't connected it with what we need to do.
>
> We still need slonik FAILOVER for catastrophes, but MOVE SET seems
> perfect for some of the maintenance use-cases we have to support.

Note that it's a nice thing if you can get the "master" node back up,
limping, even if only long enough to do a MOVE SET so you don't have to do
a FAILOVER, as this would minimize transaction loss.

If you're equating "FAILOVER == Catastrophe", you're definitely thinking
in the right direction...