From ff9e7c244c270853a8a8f58ee950859866358e1d Mon Sep 17 00:00:00 2001 From: tv Date: Sun, 8 Nov 2026 18:20:13 +0000 Subject: remake: aborts written as the user who asks; no abort by time Review 2, N3: 1150 let any member write an abort decision once a remake had expired a grace period ago, judged by the change's own time, the writer's word. A member could race the coordinator's legitimate commit with an abort dated as it liked; both taken, Automerge shows one, and nodes that acted on the commit split from those that didn't. The two writers of such aborts are operator requests whose endpoints already need write on _continuum/remakes: aborting an expired remake (DELETE /admin/remakes/{id}) and superseding one (POST /admin/remakes?force=supersede). Both now commit as the user who asks (the proposal and its vote with them, for a supersede), which the rules take as one who may write the decision. The clause judging an abort by its time goes, and with it the time the rules carried. An expired remake is still aborted through any member, by an operator. --- docs/access.md | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) (limited to 'docs/access.md') diff --git a/docs/access.md b/docs/access.md index d7e05ab..4400b91 100644 --- a/docs/access.md +++ b/docs/access.md @@ -245,12 +245,11 @@ stays as it is, wherever it comes from later (a joining node catching up, say). change only (the genesis change, a remake's snapshot). * A remake's record and its proposal by whichever member proposes, where there are none; its decision by the coordinator its proposal names, or a user who may write - there; an abort by any member once the remake expired a grace period ago, by the - time the change says it was made (its writer's word: a member could abort a remake - early, never commit one); an abort asked for by any member, which the coordinator - applies. The record of the remake that made an epoch, carried into it whole, by the - coordinator its snapshot names, where there is none. Replacing or removing a record or its proposal, by a user who may write - there. + there (an operator aborting an expired remake through any member, `DELETE + /admin/remakes/{id}`, or superseding it); an abort asked for by any member, which the + coordinator applies. The record of the remake that made an epoch, carried into it + whole, by the coordinator its snapshot names, where there is none. Replacing or + removing a record or its proposal, by a user who may write there. * What holds the members' entries, votes and remake records (`_continuum/members`, `_continuum/votes`, `_continuum/remakes`) made by whichever member first writes in it, where there is none; replaced or removed by a user who may write there only. -- cgit v1.3.1