I wasn't computing the resilience of a choose quorum system correctly. I'm happy I decided to add some unit tests!