diff --git a/03-DESIGN/01-to-be/47-delivery-from-commit-to-delivered.md b/03-DESIGN/01-to-be/47-delivery-from-commit-to-delivered.md index 44dd2f01..937ccf90 100644 --- a/03-DESIGN/01-to-be/47-delivery-from-commit-to-delivered.md +++ b/03-DESIGN/01-to-be/47-delivery-from-commit-to-delivered.md @@ -184,8 +184,9 @@ there is three milestones, one issuer of each key at every moment (ADR 0547 §11 1. **The list follows, the grants part in shadow** (issue 1945): the bus node applies the user list alone, with no want; mesh-sdk carries a copy of the bus composer, held byte for byte to the one release 6 runs; the grants part composes and compares in shadow with its tools; the vault hashes the bus accounts it is handed. The - operator's `take-over` makes the grants part's list the one loaded, and is refused while any user differs, so - it waits until the enrolment users and the persons have records on the bus (ADR 0547 §8). + operator's `take-over` makes the grants part's list the one loaded; it is allowed only when the users of both + lists are equal but for users placement no longer names, so it waits until the enrolment users and the persons + have records on the bus, and the second milestone waits for it (ADR 0547 §8, §11). 2. **Nodes compose** (issue 1126): each node agent composes its own modules; no node applies a composition made elsewhere but the bus's user list until `take-over`. 3. **Nothing is left with the controller** (issues 1126, 774): the vault mints bus accounts, the grants part