commit a96f2f70cabb17867f8de72be5db3fc09013e6ac Author: Nick Mathewson <nickm@torproject.org> Date: Wed Oct 13 17:05:59 2021 -0400 guard-spec: Clarify how the list of primary guards can change. --- guard-spec.txt | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/guard-spec.txt b/guard-spec.txt index 32c4faf..267ad1c 100644 --- a/guard-spec.txt +++ b/guard-spec.txt @@ -426,6 +426,10 @@ Table of Contents Once an element has been added to {PRIMARY_GUARDS}, we do not remove it until it is replaced by some element from {CONFIRMED_GUARDS}. + That is: if a non-primary guard becomes confirmed and not every primary + guard is confirmed, then the list of primary guards list is regenerated, + first from the confirmed guards (as before), and then from any + non-confirmed primary guards guards. Note that {PRIMARY_GUARDS} do not have to be in {USABLE_FILTERED_GUARDS}: they might be unreachable.