After landing #433: in every CD controller instance, run the CD status (after each update) through a validation procedure that crashes with an expressive error.
One invariant we want to introduce there: confirm that no CD node index is used more than once.
