Simon G

The file hash method won't stop the compromised server from issuing a comprised agent which ignores the hash checking though. Will need something better.

The server can issue a fake update to the agent, with a modified agent which will override the safety check if the server is compromised.

Appreciate the work, but it appears that your rule can be emulated by the swap rule eg ```s01 s12 s23 s34 s45 s56 s67 s78 s89 s90``` so it doesn't...