When auto-replication is enabled, are all writes to replica providers synchronous within the `SaveHolonAsync` call, or is there a fire-and-forget / async fan-out pattern? What's the failure contract — does a partial replica failure surface as an error or a warning?