1 files changed, 10 insertions, 3 deletions
diff --git a/src/access/screen.rs b/src/access/screen.rs
index a9450a6..4c640b6 100644
--- a/src/access/screen.rs
+++ b/src/access/screen.rs
@@ -39,7 +39,7 @@ use crate::document::replica::{Epoch, user_of};
 use crate::document::signatures::Signatures;
 use crate::document::{Change, ChangeHash, Document, ReadDoc};
 
-/// Changes waiting for their dependencies, kept at most.
+/// Changes waiting for their dependencies, kept at most: the oldest go.
 const MAX_WAITING: usize = 10_000;
 /// Refused changes kept for operators, at most: the oldest go.
 pub(crate) const MAX_REFUSED: usize = 1_000;
@@ -187,6 +187,13 @@ impl Waiting {
     pub(crate) fn len(&self) -> usize {
         self.0.len()
     }
+
+    /// The newest `MAX_WAITING`: the oldest go, so changes a peer sent that will never
+    /// be taken (whose dependencies or signatures never come) make way for others.
+    fn keep_newest(&mut self) {
+        let excess = self.0.len().saturating_sub(MAX_WAITING);
+        self.0.drain(..excess);
+    }
 }
 
 /// What `apply` did: how many changes it applied, and those it refused.
@@ -269,7 +276,7 @@ pub(crate) fn apply(
     let (ready, unready) = in_order(doc, candidates);
     waiting.0 = unready;
     if ready.is_empty() {
-        waiting.0.truncate(MAX_WAITING);
+        waiting.keep_newest();
         return Ok(screened);
     }
 
@@ -462,7 +469,7 @@ pub(crate) fn apply(
             screened.roots.insert(root);
         }
     }
-    waiting.0.truncate(MAX_WAITING);
+    waiting.keep_newest();
     Ok(screened)
 }