2016-11-18 UTC
# 
aaronpk eprodrom: this seems like a security consideration. if i'm tracking the state of an object, i may not want to accept notifications from an entity that doesn't control that object. i may not want to allow updates that take an object into an unexpected state that does not reflect the previous history of the object.