Interview question. Kafka cluster A is asynchronously mirrored to cluster B. When A becomes unavailable, the application starts consumers in B but reprocesses hours of events. Explain why the same offset does not mean the same record in two clusters, then design a safe cutover, consumer-position recovery and eventual failback.