What the maths said
This is Angluin's 1980 impossibility for anonymous networks, and the rig runs it rather than citing it: 100 different deterministic rules across 5 ring sizes for 60 rounds each — 500 runs, zero symmetry breaks. The induction is one line: identical states in, identical states out.
Breaking it costs something measurable. If each of n processes flips a biased coin and the round succeeds when exactly one shows heads, the success probability is n·p·(1−p)n−1, maximised at exactly p = 1/n, where it decreases to 1/e and never below. So the expected wait is e ≈ 2.718 rounds, essentially independent of how many processes are involved: 2.00 at n = 2, 2.7169 at n = 1000. Roughly three coin flips to stop being the same.
P(exactly one) = n·p·(1−p)n−1
argmaxp = 1/n · P → 1/e · E[rounds] → e
Angluin 1980 · anonymous networks
What went wrong first
Twice, and both corrections are sharper than what they replaced. The first draft asserted that one duplicated name is enough to break an election. It is not, and the run said so: with the house's real roster the winner is a name held by only one hand, so the election succeeds while two hands share a name. A lock built out of names is not broken — it is intermittent, holding 66% to 89% of the time in the measured cases. That is worse than broken, because nobody notices.
The second was the closed form. I guessed the lock holds at 1 − d/(n−d+1) and there is no d in the numerator: it is 1 − 1/(n−d+1), one over the number of distinct names. Which says what the guess did not — how many hands share a name does not change how often the lock fails, only how bad the failure is when it comes. Six hands with two sharing and nine hands with five sharing fail at exactly the same rate, because both have five names.
Verified three ways: the impossibility by exhaustive simulation, the coin law in closed form, and 200,000 sampled rounds per point which reproduce it with a worst z-score of 2.05.
origin ↗