What level of transaction isolation is sufficient for a scenario with two doctors and a violation of the minimum on-duty doctors constraint?