SYNC

Every commit is fsynced before the call returns. A returned DocumentStore.put therefore survives power loss, not merely process death.

This is the default because the engine's central promise is that reopening yields exactly the acknowledged prefix, and under BUFFERED "acknowledged" would silently come to mean "acknowledged, unless the machine loses power in the next few seconds".