diff options
| author | tv <tv@krebsco.de> | 2026-11-09 15:36:04 +0000 |
|---|---|---|
| committer | tv <tv@krebsco.de> | 2026-11-09 18:19:24 +0100 |
| commit | d16da7283ceca16f223f3fb6b0429c7b2ae1aec0 (patch) | |
| tree | 0548a37628a067eb7dcbb493d8cd6fc43afc58c6 /docs | |
| parent | c1e750c5f795d4dd659be99f873ab7f98d5a2e83 (diff) | |
screen: that a policy was held kept across a swap of the document
Review 4, F12: `Screening::of` started screening over when the document was swapped (a
drop, a switch, a rejoin), the root pin alone carried on, so whether the document had
held a policy (`policed`, 1211) was forgotten there too, not only across a restart as
documented: after a drop with the policy removed meanwhile, late changes written under
it went in unjudged again.
It is carried on now, as the root pin is; what belongs to the old document (changes
waiting, refusals, drops held) still starts over. access.md says so.
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/access.md | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/docs/access.md b/docs/access.md index 3d4aeaf..402f1ab 100644 --- a/docs/access.md +++ b/docs/access.md @@ -346,8 +346,8 @@ the signatures of what was written under a policy requiring them. While neither its document nor what it receives holds a policy, it judges only that a root is the epoch's, and nothing costs more than applying the changes. A policy removed, or replaced by one the node doesn't know, still judges what was written under it and -comes late, as long as the node runs (after a restart, a document without a policy -is judged as one that never had one). +comes late, as long as the node runs, its document swapped meanwhile or not (after a +restart, a document without a policy is judged as one that never had one). An epoch's root is pinned. A remake's is its epoch's ID, the hash of its snapshot. The first epoch's is its genesis change, which its genesis node logs (`The swarm's root`) |
