plan 10: a damaged log line refuses only its file, not the run

1 files changed, 4 insertions, 0 deletions

diff --git a/docs/design.md b/docs/design.md
index a232baf..99e5b55 100644
--- a/docs/design.md
+++ b/docs/design.md
@@ -642,6 +642,10 @@ not logged; declined files are.
   way (a refused or failed step, an interrupt) is finished by undoing the
   run once more; when the most recent run is itself an undo, plain
   `krino undo` does exactly that for the run it undid.
+- A damaged log line (a crash or a full disk cutting it) refuses only the
+  file it names, when that file can still be read from the line; the rest
+  of the run is reversed. A line of another run is ignored. Only a line
+  whose file cannot be read refuses the whole run.
 - A file is identified by its directory and its path within it, so two
   directories' files of the same name are reversed apart. A file that one
   directory's rules move into another included directory, which sorts it