No record left behind: How Warpstream can withstand regional outages