Handle events which fail auth on their auth_events differently from those that fail on the resolved state #11018
Description
This issue has been migrated from #11018.
Following up a comment at matrix-org/synapse#10956 (comment):
We can now mark an event as rejected in either of two cases:
- the event does not pass the auth rules based on its
auth_events - the event does not pass the auth rules based on the resolved state at that point on the DAG.
As is pointed out in that comment thread, we should probably consider these two cases differently.