Merge PR #3898: Circuit breaker high level explanation

This commit is contained in:
frog power 4000 2019-03-25 11:37:05 -04:00 committed by Christopher Goes
parent 8528ac7665
commit 2ca86c8605
2 changed files with 18 additions and 0 deletions

View File

@ -0,0 +1 @@
\#926 circuit breaker high level explanation

View File

@ -0,0 +1,17 @@
# Concepts
The intention of the circuit breaker is to have a contingency plan for a
running network which maintains network liveness. This can be achieved through
selectively "pausing" functionality of specific modules on a running network.
The circuit breaker is intended to be enabled through either:
- governance
- for emergencies a special subset of accounts selected by the state machine
- a transaction which proves the expected behaviour is broken
## Pause state
The basic pause state of any module simply disables all message routes to
that module. Beyond that, it may be a appropriate for different modules to
process begin-block/end-block in an altered "safe" way.