AFRINIC saga currently tracked end-to-end.
Governance / Case File
CASE FILE
Case File governance intelligence tracks institutions, policy processes, standards activity, registry operations, accountability disputes, and implementation signals that affect internet infrastructure. BTW.
Institutional BreakdownLegal and Policy ConflictElection and Control Risk
Institution legitimacy and continuity risk mapping.
Primary-source based timeline and risk analysis.
Used for continuity and policy exposure planning.
Latest Coverage
Latest from CASE FILE
758 articles
CASE FILE
The CDN Advertised a Ceiling. It Did Not Reserve the Service: RFC 9808
A new interconnection vocabulary lets one CDN publish capacity limits and aligned telemetry to another. The useful fact is narrower than the comforting one: the numbers can discipline delegation without guaranteeing that capacity has been reserved, a request will be admitted or…
CASE FILE
The Certificate Named Four Purposes. The Relying Party Still Had to Separate Them: RFC 9809
A new X.509 vocabulary distinguishes configuration, trust-anchor changes, update packages and safety-sensitive communication. Its value begins where its authority ends: the names travel, while combination policy, operational permission and proof of outcome remain local.
CASE FILE
The Standard Froze TLS 1.2. The Estate Did Not Disappear: RFC 9851
A feature freeze changes what a standards body will design next. It does not reach into a load balancer, find a dependent client or produce the receipt that says a protocol has left production.
CASE FILE
The Server Set `$istrusted`. The User Still Needed to Know Why: RFC 9979
A synchronized mailbox label can carry a useful judgment across clients. It cannot carry the evidence, actor, time and external result that the judgment leaves behind.
CASE FILE
The Domain Published “Reject.” The Receiver Still Owned the Decision: RFC 9989
A DNS record can travel farther than the authority that published it. Under RFC 9989, `p=reject` tells a receiving organization how a Domain Owner wants failed mail treated. It does not operate the receiver's gate. That separation is not a loophole in DMARC; it is the control…
CASE FILE
The Ping Passed One Tree Instance. The Policy Still Had Other Paths: RFC 9961
RFC 9961 gives an operator a sharply addressed test: one Root, one Tree-ID and one Instance-ID. That precision is valuable because an SR P2MP Policy can contain several candidate paths and each candidate can hold more than one tree instance. The same precision also limits the…
CASE FILE
The Auth Key Matched. The Packet Was Still Not Authenticated: RFC 9986
A 32-bit value can show that a peer reproduced the expected ISAAC sequence. It cannot turn the rest of a BFD control packet into authenticated evidence.
CASE FILE
The Decoder Named a Profile. Its Level and Band Still Set the Workload: RFC 9924
RFC 9924 makes “APV supported” an incomplete sentence. A profile identifies required coding features; a level bounds picture and tile workload; a band caps coded data rate. Only the three together describe the decoder claim that a professional workflow can test.
CASE FILE
The Product Was “CMC Compliant.” Nobody Had Named Its Role: RFC 10004
A certificate platform can pass a CMC checklist and still leave the decisive question unanswered: compliant as an end entity, registration authority, certification authority, client, server—or several of those roles on different edges?
CASE FILE
The Controller Built the Recovery Graph. The Next Packet Still Needed a Local Decision: RFC 9912
RFC 9912 gives unreliable radio conditions a bounded set of protection choices, then separates that prepared optionality from the path an upcoming packet actually takes. The distinction is operationally decisive: a green controller state is not a packet receipt.
CASE FILE
The Recovery Graph Contained Every Feasible Path. It Did Not Record the Packet Journey: RFC 9912
RFC 9912 gives unreliable media a disciplined space of recovery choices. It also draws a harder evidentiary line: the graph describes where a packet could go, while distributed forwarding decisions determine where each packet actually went.
CASE FILE
The OID Was Recognized. The SLH-DSA Certificate Still Failed the Mode Check: RFC 9909
RFC 9909 gives X.509 a precise vocabulary for SLH-DSA keys and signatures. That vocabulary is intentionally unforgiving: a parser recognizing the family does not excuse a Pure/Hash mismatch, present parameters, wrong key use or an unproved trust decision.
CASE FILE
The Classifier Named the Flow. It Did Not Prove the Treatment: RFC 9892
A DLEP modem can tell its router which header patterns belong to a flow, but RFC 9892 keeps that description separate from the extension that uses it, the data-plane state that follows and the service result an operator may later claim.
CASE FILE
The Client Predicted the Delay. The Server Still Owned the Validation Window: RFC 9891
RFC 9891 lets a Delay-Tolerant Networking client estimate how long an ACME challenge may take, but the estimate does not move the deadline: the server still controls the acceptance window, the path policy and the conclusion that follows.
CASE FILE
A Wikimedia Foundation Budget Has a Fiscal Clock, Not a Page-Level Editorial Verdict
A fiscal-year resolution has an unusually clean kind of clarity. It has a date, a decision-maker, a stated amount, a time period and an identified management path. A page-level editorial conclusion has a different kind of clarity: an applicable policy, evidence, discussion…
CASE FILE
The VLAN Field Was Twelve Bits. The Guidance Gave It Sixteen: RFC 9895
RFC 9895 makes Ethernet tags part of DLEP credit control, but its management guidance gives a 12-bit VLAN field a 16-bit-looking range. The wire format resolves the executable boundary; configuration, tests and vendor interfaces still need proof that they resolve it the same way.
CASE FILE
At Kubernetes, a KEP Marked Implementable Is Neither a Release Inclusion Nor a Cluster-Support Promise
“Kubernetes approved the feature” can sound like a finished operational fact. The project’s public process says something more useful and more limited. An impacted SIG can approve a Kubernetes Enhancement Proposal for implementation; a release team can track a milestone; a…
CASE FILE
A CVE Record Is a Coordination Reference, Not a Patch or Remediation Receipt
The most useful thing a CVE record does is also the reason it is so easily overstated. It gives parties a stable way to mean the same vulnerability. That shared reference permits a finder, a CNA, a supplier, a distribution, a security team and an asset operator to exchange…
CASE FILE
The Registrant Was Abroad; the Dot-Com Registry Was in Virginia: CNN v CNNews.com
The Registrant Was Abroad; the Dot-Com Registry Was in Virginia: CNN v CNNews.com intelligence summary explains the development, the public evidence available to readers, the organisations involved, the regional context, market exposure, and the infrastructure consequences that…
CASE FILE
The Certificate Challenge Crossed the Delay. Authority Did Not: RFC 9891
RFC 9891 carries an ACME proof through a delay-tolerant network, but it carefully stops the proof at control of a Node ID during one policy-bound exchange. Everything beyond that boundary still needs its own evidence.
Member Unlock
Restricted Profile Intelligence
Login is required to unlock full profile briefings and deep-dive sections.
Strategic Circle Briefing
Join to unlock strategic briefings after signing in.
Join Strategic CircleLeadership Alliance Briefing
For qualified IP-asset owners and management; sign in to unlock alliance briefings.
Join Leadership AllianceSession Map
Active Dossiers
AFRINIC Saga
Multi-year governance and legal crisis with implications for RIR accountability worldwide.
Open AFRINIC Saga