[E-Lang] Hash Chaining & Capabilities, Proposal #1b: SimplifyingPluribus

[Tyler Close]

Markm wrote:
> When Alice then sends resultC
> to Bob, VatA would simply send <vatID(C),
> swissNumber(resultC)> to VatB,
> which would then send it to VatC to look up the result.

What happens if Bob tries to use his resultC before Carol has gotten
the request from Alice?

>From Carol's perspective, resultC from Bob is indistinguishable from a
forged cap. If Carol responds to Bob that resultC is a forged cap, Bob
thinks that Alice gave him a forged cap.

If Alice and Bob are neighbours, and Carol is a remote resource, then
this unfortunate message sequence will be the common case. Consider
the scenario where Carol is hosting a brand of erights and Alice is
transferring erights to neighbour Bob.

I've got some thoughts here, but I'll wait for your #2 solution first.

Tyler