Document consistency model

we don't have power_on/off right now, so you can omit that. We *do* have headnode_start, which is mentioned, though it doesn't have its own bullet.