> It seems rather like we should be invalidating the cache "whenever the > client thinks an RPC failed" (but we can be clever about it for RPCs > that don't change anything, etc.). I prefer bad performance because of too frequent cache invalidation compared to data corruption. I think you do as well ;-) Harald.