The rule is that cache states held in suspension must fade away. This is a defense against congestion attacks that try to foil the kernel with a crowded cache stack. The kernel security needs to clear, think of it as leaving space for the native security coin to flow. Timeouts provide the arrow of time for contracts and that is a big simplification for provability. Contract chains have ordering enough when enclosed timeouts are contained. Each interface in the chain is guaranteed the input is not a 'fails to deliver', but a valid enforceable agreement.
No comments:
Post a Comment