<chaser> > <@rbrunner7> Plus, what make me think the most: It may turn out to be quite hard to test this feature well beforehand, because there is only one mainnet, and testing "under realistic conditions" is very hard or maybe next to impossible. So if we deploy, there will be a "residual risk" that something unexpected goes wrong [... too long, see mrelay.p2pool.observer/e/jOq0hrIKWVA1ZWNF ]

<chaser> rbrunner "can we just shut the whole thing down": there could be a DNS entry containing a switch. nodes could differentiate between the checkpointing being turned off and servers going offline involuntarily (in the latter case, caching the latest DNS record and following them to prevent deeper reorgs).