mirror of
https://github.com/jmcorgan/fips.git
synced 2026-08-03 21:36:16 +00:00
Phase 4 of the rekey suite waited for only one more initiator cutover (guaranteeing three) while Phase 6 asserts at least four. The fourth cutover then had to land in the brief window between the wait returning and the Phase 6 log snapshot, so host load could push it past the window and fail the run even though every cutover completed correctly. Wait for two more cutovers, the full second rekey cycle, matching the Phase 6 threshold, so the asserted count is guaranteed before it is checked.