Merge PR #3898: Circuit breaker high level explanation

2019-03-25 16:37:05 +01:00
parent 8528ac7665
commit 2ca86c8605
2 changed files with 18 additions and 0 deletions
@@ -0,0 +1,17 @@
+# Concepts
+
+The intention of the circuit breaker is to have a contingency plan for a
+running network which maintains network liveness. This can be achieved through
+selectively "pausing" functionality of specific modules on a running network.
+The circuit breaker is intended to be enabled through either:
+
+ - governance
+ - for emergencies a special subset of accounts selected by the state machine
+ - a transaction which proves the expected behaviour is broken
+
+## Pause state
+
+The basic pause state of any module simply disables all message routes to
+that module. Beyond that, it may be a appropriate for different modules to
+process begin-block/end-block in an altered "safe" way. 
+