-
Notifications
You must be signed in to change notification settings - Fork 716
Description
Summary
Disable recognition of AllowUpdateAfterExpiry
and AllowUpdateAfterMisbheaviour
Problem Definition
Currently these parameters are intended to signal the recovery options for a client if they become expired or frozen. A governance proposal cannot overwrite a client if these parameters if they are set to false. However, a code migration can overwrite the client and consensus states regardless of the value of these parameters. Thus, I don't find value in enforcing these checks. If governance votes to overwrite a client or consensus state, it is likely governance is also willing to perform a code migration to do the same.
Proposal
Do not modify the client state. Leave the booleans there for signalling intent, but remove the enforcement checks. This will allow for easier means of client recovery
@cwgoes thoughts?
For Admin Use
- Not duplicate issue
- Appropriate labels applied
- Appropriate contributors tagged/assigned