diff --git a/docs/spec/ibc/connections.md b/docs/spec/ibc/connections.md index 248a9e771a..3a1c2efc05 100644 --- a/docs/spec/ibc/connections.md +++ b/docs/spec/ibc/connections.md @@ -38,7 +38,9 @@ _valid(Hh ,Mk,v,h )_ ⇒ _[true | false]_ All proofs require an initial _Hh_ and _Ch_ for some _h_, where Δ_(now, Hh) < P_. -Any header may be from a malicious chain (e.g. shadowing a real chain state with a fake validator set), so a subjective decision is required before establishing a connection. This can be performed by on-chain governance or a similar decentralized mechanism if desired. Establishing a bidirectional initial root-of-trust between the two blockchains (_A_ to _B_ and _B_ to _A_) is necessary before any IBC packets can be sent. +Establishing a bidirectional initial root-of-trust between the two blockchains (_A_ to _B_ and _B_ to _A_) — _HAh_ and _CAh_ stored on chain _B_, and _HBh_ and _CBhh | Uh )_ as defined above to always return _false_. + +Closing a connection may break application invariants (such as fungiblity - token vouchers on chain _B_ will no longer be redeemable for tokens on chain _A_) and should only be undertaken in extreme circumstances such as Byzantine behavior of the connected chain. + +Closure may be permissioned to an on-chain governance system, an identifiable party on the other chain (such as a signer quorum, although this will not work in some Byzantine cases), or any user who submits a connection-specific fraud proof of Byzantine behavior. When a connection is closed, application-specific measures may be undertaken to recover assets held on a Byzantine chain. We defer further discussion to { an appendix }. diff --git a/docs/spec/ibc/references.md b/docs/spec/ibc/references.md index f3677494cf..9262ff99cf 100644 --- a/docs/spec/ibc/references.md +++ b/docs/spec/ibc/references.md @@ -5,6 +5,9 @@ ##### 1: [https://github.com/cosmos/cosmos/blob/master/WHITEPAPER.md#inter-blockchain-communication-ibc](https://github.com/cosmos/cosmos/blob/master/WHITEPAPER.md#inter-blockchain-communication-ibc) +##### 2: +{ vector clock } + ##### 3: [https://blog.cosmos.network/consensus-compare-casper-vs-tendermint-6df154ad56ae#215d](https://blog.cosmos.network/consensus-compare-casper-vs-tendermint-6df154ad56ae#215d)