From d322e7d4aa41d94232113cb7680cec1d65a11b0c Mon Sep 17 00:00:00 2001
From: tv <tv@krebsco.de>
Date: Sat, 7 Nov 2026 22:35:22 +0100
Subject: access: members refused as a whole

With signatures required, a member whose own change broke a rule is
refused as a whole: sent nothing, shown in /peers (refused), in stats
(sync.refusedPeers) and on the dashboard, until a change of its is
taken again or the epoch changes.

Auth plan M6 (diverged standing).
---
 docs/openapi.yaml | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

(limited to 'docs/openapi.yaml')

diff --git a/docs/openapi.yaml b/docs/openapi.yaml
index 7c8bb84..832d941 100644
--- a/docs/openapi.yaml
+++ b/docs/openapi.yaml
@@ -2175,6 +2175,13 @@ components:
         divergedForSecs:
           type: [integer, 'null']
           description: How long its heads have differed from ours with no sync message from it in between; null while they match.
+        refused:
+          type: [object, 'null']
+          description: "Refused as a whole, its own change having broken the swarm's rules (`docs/access.md`): sent nothing. Null if not."
+          properties:
+            secsAgo: { type: integer }
+            change: { type: string, description: The change of its that broke the rules. }
+            why: { type: string }
         hasPendingDelivery:
           type: boolean
         epoch:
@@ -2568,12 +2575,14 @@ components:
               type: integer
         sync:
           type: object
-          required: [divergedPeers, largestReceivedBytes]
+          required: [divergedPeers, refusedPeers, largestReceivedBytes]
           properties:
             lastFromNeighbourSecs:
               type: [integer, 'null']
             divergedPeers:
               type: integer
+            refusedPeers:
+              type: integer
             largestReceivedBytes:
               type: integer
         relay:
-- 
cgit v1.3.1