I must be missing something. How can this pending_pn be any different from accepted_pn?

...okay, it looks to me like we aren't writing accepted_pn to disk during normal operation. I think we want to be doing that instead. I'm not actually that familiar with the specifics of our Paxos implementation, though, so maybe I'm missing something.