Desirable properties

[yaronf]

• Durability: I suggest to remove this one, because it seems to be a property of each network rather than the protocol.
• Byzantine correctness (maybe there is a better term for this): the protocol needs to survive not only unintentional failures, but also intentional failures and corruptions caused by one of the gateways being malicious.

[findthomas]

Actually, the ACID properties applies to the 2PC transaction itself (in classical distribute database designs), and not the databases or networks themselves. Some databases implement Transaction Monitors (TM) as endpoints (fronting the database) to permit the database to participate in the distributed transactions.

In the case of SATP, the TM construct is represented by the Gateways.

Byzantine correctness (maybe there is a better term for this): the protocol needs to survive not only unintentional failures, but also intentional failures and corruptions caused by one of the gateways being malicious.

This is a topic that the WG has not yet discussed in-depth. For example, what if G2 purposely tries to deny transfers from completing.

[yaronf]

IMO eventually you'd need a legal action, hence my text in #13. So yes, we need to be very crisp when defining this property.