On Sat, Jul 11, 2026 at 11:20 AM Michael S. Tsirkin <[email protected]> wrote: > Why does it "matter most", or at all, there? > Host can always deny guest service. In fact, this is how cloud vendors > charge their clients, by denying service to whoever did not pay them. ... > I'm all for making things easier to debug even when the device is buggy. > But I'm not inclined to add tons of hard to maintain code to > that end, and I would be worried broken hosts will come to > rely on drivers working around them.
I am always confused by the CoCo threat model to be honest, since it seems like some people care a lot about maximalist reliance on the contract and other people are more practical about how many other vectors exist anyway. No hard feelings if you want to NACK, but at least it's documented publicly now for people to consider. Thanks, Mike
