We say that threatens
with domain growth if
LCW(
),
possibly comes
between
and
, and
contains an effect that makes
true,
for some
that unifies with some
. For the example above in which
the link
protects LCW on the word count of every file
in /papers, addition of a step which moved a new file into /papers would
result in a domain-growth threat, since the agent might not know the length
of the new file.
Note that an effect which makes
some false does not pose a threat to the link! This
corresponds to an action that moves a file out of /papers - it's
not a problem because one still knows the lengths of all the files that
remain.