pub fn unmet(
t: &Transition,
s: &SystemState,
defs: &UnitDefs,
by: &Actor,
) -> Option<String>Expand description
An approval token issued at issued has expired by now, both on the
boot clock (§12h; §12 step 4:
24 hours). Saturating: a token issued near the end of time never expires
early, and no clock value makes this panic.
Why t’s precondition does not hold for by (§12 step 5), if it does
not. An attested override is replaced only by its holder; anyone else
gets its holder named (C3).