The idea
Each liminal is a machine identity in Lys with its own key. The dialling end names the peer, its address and the subjects it exports. The accepting end names the machines it admits by public key. An open carries the dialling liminal’s pass; its grants and its expiry are judged on that open, after the pass has been renewed if it had lapsed.
Why it matters
A liminal never trusts an address. A peer that cannot present a valid pass, or asks to import a subject it may not, is refused by name at the accepting end, and the refusal is logged at both ends with the action, the peer and the reason. A refused open is retried like a failed dial.
How it works
The health page counts opens, refusals and the records that crossed, and names the last refusal. A subject resumes from the position the peer last acknowledged, so a restart on either end loses nothing that was durable.
-
links_opened - Opens that succeeded on this link since the server started.
-
refused - Opens the peer refused by name. The last refusal is kept as last_refusal.
-
dial_refused - Dials the operating system refused before any open. The dial is retried.
-
crossed - Records that crossed the link.
-
resumed_from - For each exported subject, the position the peer resumed from after the last open.