this is scenario 1 in my answer above (#11)
scenario 1 :"replication has time to reach only replica1, but replica2 is promoted: replica2 never saw the document " in this scenario not always return an exception,just like i described above,it could make data loss