From a96f2f70cabb17867f8de72be5db3fc09013e6ac Mon Sep 17 00:00:00 2001 From: Nick Mathewson Date: Wed, 13 Oct 2021 17:05:59 -0400 Subject: guard-spec: Clarify how the list of primary guards can change. --- guard-spec.txt | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'guard-spec.txt') diff --git a/guard-spec.txt b/guard-spec.txt index 32c4faf..267ad1c 100644 --- a/guard-spec.txt +++ b/guard-spec.txt @@ -426,6 +426,10 @@ Table of Contents Once an element has been added to {PRIMARY_GUARDS}, we do not remove it until it is replaced by some element from {CONFIRMED_GUARDS}. + That is: if a non-primary guard becomes confirmed and not every primary + guard is confirmed, then the list of primary guards list is regenerated, + first from the confirmed guards (as before), and then from any + non-confirmed primary guards guards. Note that {PRIMARY_GUARDS} do not have to be in {USABLE_FILTERED_GUARDS}: they might be unreachable. -- cgit v1.2.3-54-g00ecf