Introduces initial work on cluster correctness proover.

o This exhausts all possible cluster delivery orders, generating
  a graph of all possible state transitions the cluster can make.
  Incorrect end states and bad loops can then be inferred from the
  graph and corrected.