Re: how to extend a capability on a data source?
Bill Frantz <[email protected]>
| Newsgroups | gmane.comp.capabilities.general |
|---|---|
| Message-ID | <r422Ps-1075i-731EEB145CF3469BBBEE206A69A8F612@Williams-MacBook-Pro.local> |
On 11/3/13 at 9:44 PM, [email protected] (David Barbour) wrote: >On Sun, Nov 3, 2013 at 9:06 PM, Rob Withers <[email protected]> wrote: > >... >> >>As an interesting side note, if you use linear types for continuations you >>can also eliminate the send-response paradigm (all responses can be modeled >>as sends to continuations, which cannot be dropped). >> >> >>This is what my event framework provides, with using one-way sends. >> > >You statically enforce that nobody forgets to respond using the one-way >send, and that nobody calls the one-way send twice? Finally something in this thread I think I understand. :-) This kind of assurance only works if you can trust both vats. If the remote system can not be trusted, it can generate two response messages, or fail to respond. Link failure can also cause a "fail to respond" situation even when the vats are trustworthy. I suppose you can inject a "failed" one way send when you notice that the link has timed out, but this kink of logic is fraught with messy problems. Cheers - Bill ----------------------------------------------------------------------- Bill Frantz | Truth and love must prevail | Periwinkle (408)356-8506 | over lies and hate. | 16345 Englewood Ave www.pwpconsult.com | - Vaclav Havel | Los Gatos, CA 95032