summaryrefslogtreecommitdiffstats
path: root/docs/MESHBAY_DESIGN.md
diff options
context:
space:
mode:
authorChristophe Besson <cbesson@gmail.com>2026-10-01 13:24:11 +0200
committerChristophe Besson <cbesson@gmail.com>2026-10-01 13:24:11 +0200
commitf0019e366fef813b22d2d55cf7604e20f0a08707 (patch)
tree5ad3312dcb753e6aa53f3ea581d21b665d969e19 /docs/MESHBAY_DESIGN.md
parente0905bd447f6214dc34e360554826ace45bde676 (diff)
downloadmeshbay-f0019e366fef813b22d2d55cf7604e20f0a08707.tar.gz
fix(node): a revoked account is disconnected, not only refused next time
A user revocation closed nothing: the denylist stopped the next connection and left the live ones streaming and chatting. Revocations now go through one method that closes the account's or the group's sessions (F-21). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Diffstat (limited to 'docs/MESHBAY_DESIGN.md')
-rw-r--r--docs/MESHBAY_DESIGN.md5
1 files changed, 3 insertions, 2 deletions
diff --git a/docs/MESHBAY_DESIGN.md b/docs/MESHBAY_DESIGN.md
index c443955..8c1f446 100644
--- a/docs/MESHBAY_DESIGN.md
+++ b/docs/MESHBAY_DESIGN.md
@@ -2161,8 +2161,9 @@ Two verbs on a group, and they are distinct things:
| Reversible from the panel | yes | no |
The client shows the real state, not a blanket one. **Revocation is honoured by
-nodes** and the denylist survives a restart (**H4**); signaling refuses a group that
-is not active.
+nodes** and the denylist survives a restart (**H4**): an account's or a group's
+live sessions are closed when the revocation arrives, not left to run until they
+happen to end. Signaling refuses a group that is not active.
**Revocation has one door, and it broadcasts.** Only an administrator revokes, and
only through `POST /v1/admin/revoke`, which signs the revocation and pushes it to every