persistent: if a node failed to update_record, trigger a recovery