'failing open'

[zxkevn]

gatekeeper needs to be more error-tolerant in general. default strategy right now is more or less goto cleanup which was good for development but we're past that. a good, thorough review of gatekeeper's code needs to happen to determine when it's still appropriate to bail on errors. all other issues like say, #40, should be handled gracefully without tearing everything down.

[zachriggle]

You should specify which version of Gatekeeper. The plan moving forward (per @bool101) is to switch to what is now the ebeip90 branch.

[zxkevn]

Ah well that's news to me.

[zachriggle]

Mostly it's very similar, just multiple programs instead of one monolithic binary. It allows you to swap out things easily, change ordering, and the binaries are each bite-sized and easy to debug.