Allow the signalling mechanism to accommodate emergency upgrades #4101
Labels
needs:discussion
item needs to be discussed as a group in the next sync. if marking an item, pls be prepped to talk
Summary
The current upgrade system imposes a delay on actually changing the state machine (1 week on mainnet). While in normal circumstances, this can provide ample time for the slowest of validators to upgrade, it also means that in the case of an emergency upgrade - often needed if there is a critical bug that requires a breaking change, there is a prolonged window of vulnerability. We should explore a system that allows us to quickly distribute and upgrade a network within a 12-24 hour timespan in the case of these emergencies.
Proposal
Open to proposals on what is the best approach here.
Some suggestions:
The text was updated successfully, but these errors were encountered: