You probably checked this yourself, but this nemesis doesn't actually know whether it managed to kill the underlying process. You should make sure that this alternating 10-seconds-partitioned, 10-seconds-healed schedule actually triggers failure detection, leader election, etc. A lot of systems are stable under short schedules but break down under prolonged ones. :)