diff options
Diffstat (limited to 'docs/access.md')
| -rw-r--r-- | docs/access.md | 11 |
1 files changed, 6 insertions, 5 deletions
diff --git a/docs/access.md b/docs/access.md index 9bd99cc..458c2dd 100644 --- a/docs/access.md +++ b/docs/access.md @@ -411,11 +411,12 @@ before, plain or signed by a key its planter put there itself, is gone unless th operator kept it. Every node is given the keys whose signature it takes on such a remake, out of the -document (`--strict-keys`, `authorized_keys` lines): one an operator holds. A node -votes for a strict remake only with its manifest signed by one of them; without any, -it votes for none (logged, `Not voting for a strict remake`), unless -`--follow-strict-remakes`. Once a majority commits one, every node switches, as with -any remake. +document (`--strict-keys`, `authorized_keys` lines): one an operator holds, the same +on a majority of the members at least. A node votes for a strict remake only with its +manifest signed by one of them; without any, for none (logged, `Not voting for a +strict remake`). Once a majority commits one, every node switches, as with any +remake. One that gets no majority aborts, its reason naming the members that didn't +vote: those whose `--strict-keys` don't take the manifest's signer, or that were away. ```sh continuum-signed strict |