diff --git a/03-DESIGN/01-to-be/47-milestones/G-20-lead-answers.md b/03-DESIGN/01-to-be/47-milestones/G-20-lead-answers.md index c66cf8c3..59517ae8 100644 --- a/03-DESIGN/01-to-be/47-milestones/G-20-lead-answers.md +++ b/03-DESIGN/01-to-be/47-milestones/G-20-lead-answers.md @@ -231,3 +231,6 @@ names the principle that settles it, and is cited as "design 47 G A-n". readable by its tools bundle's account in its manifest (a group read, nothing more), so the bundle reads a snapshot's file and sends its chunks as A-45 says; the keeper still writes and removes the files, and a protected snapshot is still never handed out, by the bundle's own check. +- **A-60** (§681, A-45; principle 7) The chunk subjects of a `chunks: true` verb are granted to the principal that + answers the verb: for the bus module, the tool runner's principal for its tools bundle (A-45); the restore subjects of + restricted streams to the keeper's process account, standing (ADR 0675 §2).