Back to matrix

G02-CJ: No

Rationale

In the selected replicated route-server composition, destination attachment changes alter peer/link announcements. server.rs applies those announcements to the destination node and inward-link graph and passes accepted announcements to Peers.add_ann. peer.rs advertises new inventory hashes to incoming replication peers; newly connected peers receive the known inventory, and outgoing peers request every unknown advertised announcement. There is no regional or communicating-peer subscription filter in this exchange. Globally capable route-server replicas therefore disseminate individual attachment state beyond the affected region and active communicating parties. This fails G02 even though ordinary transit switches and endpoints do not all receive that state.

Assessment method

Whole selected composition source analysis; no runtime experiment

Source context

Pinned cjdns route-server announcement, replication and route-query source

Outstanding qualification

This is a source-derived architectural verdict for the explicitly selected replicated route-server design, not the older DHT-only cjdns design or every possible deployment. Replication follows configured directed peer relationships; it is not an all-client broadcast. Disconnected replicas need not receive an update, but their absence does not establish preserved arbitrary remote reachability: route queries use the local graph and require the destination locally. No timing, convergence, capacity, security or runtime failure is inferred. Independent private-IP underlay operation does not remove this overlay update requirement. Existing implementation/interoperability qualifications remain.

Public sources

Editorial evidence references

The following identifiers refer to research records not included in this public package; they are not public links.