Context. #123 step 10: nothing stops a malicious operator from granting traffic nobody paid for, and Phase 2 accepts that. Document it, do not test it. Today it is written only in the design doc (Appendix C story 2, step 9). The sequencer accepts any limit the operator sets (#129 has the Canton reference), so every grant rests on trusting the operator.
Deliverable. A short statement in the operator documentation (#37): nothing checks the operator's grants against purchases, and Phase 2 accepts this. Worth noting next to it: the planned outage advance (#129) is the one case where the reference app grants past what was bought, and its cap is set by vote.
Acceptance. The statement is in the operator guide.
Depends on. #37.
Epic: #71 · Source: #123 step 10
Context. #123 step 10: nothing stops a malicious operator from granting traffic nobody paid for, and Phase 2 accepts that. Document it, do not test it. Today it is written only in the design doc (Appendix C story 2, step 9). The sequencer accepts any limit the operator sets (#129 has the Canton reference), so every grant rests on trusting the operator.
Deliverable. A short statement in the operator documentation (#37): nothing checks the operator's grants against purchases, and Phase 2 accepts this. Worth noting next to it: the planned outage advance (#129) is the one case where the reference app grants past what was bought, and its cap is set by vote.
Acceptance. The statement is in the operator guide.
Depends on. #37.
Epic: #71 · Source: #123 step 10