Somehow the contextCSN of my accesslog wasn't in sync with the
contextCSN of my primary db on master or my replica; master and replica
agreed on the contextCSN for the primary db, but the contextCSN for
the accesslog on my master was off. This explains the symptoms I was
seeing: I could sync the entire primary db to my slave, but trouble
ensued once the slave started to look at the accesslog (due to the
conflicting contextCSNs).
Once I got the contextCSNs in sync (by making a trivial modification to
an entry in my primary db) things got a lot happier. I need to figure
out how I managed to get the contextCSNs out of sync in the first place.