From d322e7d4aa41d94232113cb7680cec1d65a11b0c Mon Sep 17 00:00:00 2001
From: tv <tv@krebsco.de>
Date: Sat, 7 Nov 2026 22:35:22 +0100
Subject: access: members refused as a whole

With signatures required, a member whose own change broke a rule is
refused as a whole: sent nothing, shown in /peers (refused), in stats
(sync.refusedPeers) and on the dashboard, until a change of its is
taken again or the epoch changes.

Auth plan M6 (diverged standing).
---
 src/simtest/policy.rs | 9 +++++++++
 1 file changed, 9 insertions(+)

(limited to 'src/simtest/policy.rs')

diff --git a/src/simtest/policy.rs b/src/simtest/policy.rs
index b6be095..eb706bc 100644
--- a/src/simtest/policy.rs
+++ b/src/simtest/policy.rs
@@ -90,6 +90,15 @@ async fn a_swarm_judging_every_change() {
         })
         .await;
         assert!(!holds(node, "notes/forged").await);
+        // Its own change, signed: c refused as a whole, sent nothing more.
+        use crate::locks::MutexExt;
+        assert!(
+            node.screening
+                .lock_or_recover()
+                .refusing(c.local_id())
+                .is_some(),
+            "c isn't refused as a whole"
+        );
     }
 }
 
-- 
cgit v1.3.1