If an operation arrives for which the principal has been removed from the domain by agreement, the correct behaviour is to ignore the message in the same way as for any other op concurrent with an agreement.
At present, the signature validation fails, causing the clone to shut down (normal behaviour to avoid divergence).
If an operation arrives for which the principal has been removed from the domain by agreement, the correct behaviour is to ignore the message in the same way as for any other op concurrent with an agreement.
At present, the signature validation fails, causing the clone to shut down (normal behaviour to avoid divergence).