access: members refused as a whole

With signatures required, a member whose own change broke a rule is
refused as a whole: sent nothing, shown in /peers (refused), in stats
(sync.refusedPeers) and on the dashboard, until a change of its is
taken again or the epoch changes.

Auth plan M6 (diverged standing).

1 files changed, 9 insertions, 0 deletions

diff --git a/src/simtest/policy.rs b/src/simtest/policy.rs
index b6be095..eb706bc 100644
--- a/src/simtest/policy.rs
+++ b/src/simtest/policy.rs
@@ -90,6 +90,15 @@ async fn a_swarm_judging_every_change() {
         })
         .await;
         assert!(!holds(node, "notes/forged").await);
+        // Its own change, signed: c refused as a whole, sent nothing more.
+        use crate::locks::MutexExt;
+        assert!(
+            node.screening
+                .lock_or_recover()
+                .refusing(c.local_id())
+                .is_some(),
+            "c isn't refused as a whole"
+        );
     }
 }