en-i8-token-bound-to-candidate
planarian @ a924e09 · Spec v4.6 · snapshot main · all versions
An AskFirst change is approved; before it runs, the owner edits the configuration so the candidate it would build differs. The token, bound to the old candidate, does not authorise the new one.
| Harness | Scoring | Expects | Latest verdict |
|---|---|---|---|
| fake, vm | must-pass | txn: Rejected(Stale) ApplyChange | fake: PASS; VM: not run in this build |