Context
protocol-core/group-state.md, line 92:
"A repair path MAY restore retained state, import a verified current snapshot, rejoin through MLS, or use another recovery method defined by a future protocol-core document."
Defect
"Import a verified current snapshot" is used exactly once in the entire repo (confirmed via grep) and is never defined anywhere — what constitutes a snapshot, who produces/signs it, what makes it "verified," or how it's obtained. Unlike the sibling option in the same sentence ("another recovery method defined by a future protocol-core document"), which is clearly flagged as a placeholder for future work, this one is presented as an already-available mechanism.
Failure scenario
Low blast radius since this is one option in a MAY-list where "rejoin through MLS" is a well-defined fallback, but it is a genuinely undefined normative-adjacent term that a careful implementer would have no way to actually build.
Suggested fix
Either define the snapshot mechanism (format, signer, verification rule) or rephrase this option to make clear it, too, is reserved for a future protocol-core document, matching the treatment of the adjacent placeholder option.
Context
protocol-core/group-state.md, line 92:Defect
"Import a verified current snapshot" is used exactly once in the entire repo (confirmed via grep) and is never defined anywhere — what constitutes a snapshot, who produces/signs it, what makes it "verified," or how it's obtained. Unlike the sibling option in the same sentence ("another recovery method defined by a future protocol-core document"), which is clearly flagged as a placeholder for future work, this one is presented as an already-available mechanism.
Failure scenario
Low blast radius since this is one option in a MAY-list where "rejoin through MLS" is a well-defined fallback, but it is a genuinely undefined normative-adjacent term that a careful implementer would have no way to actually build.
Suggested fix
Either define the snapshot mechanism (format, signer, verification rule) or rephrase this option to make clear it, too, is reserved for a future protocol-core document, matching the treatment of the adjacent placeholder option.