- adds circuit reroute state (active/Limbo) with a grace timer, entered on
an ingress ChannelClosed fault for a reroutable circuit and torn down on
grace expiry; issues a controller-signed reroute token at circuit
creation when reroutable
- adds the takeover splice (X1): re-splices a reroutable circuit's ingress
to a new router under the circuit's mutation guard, preserving the
terminator side, advancing the iteration, and minting a fresh token
- stamps the fault reason on router-emitted ingress faults so only a
channel close is Limbo-eligible
- keeps the D3 idle scanner from prematurely reaping Limbo circuits
Paul Lorenz
6326203b5d