Questions about min_roles_in_agreement and many to one delegations

For multi-role delegations can min_roles_in_agreement include multiple instances of the same role? For example, if Targets delegates to Alice and Bob, who both delegate to Charlie, can Charlie's approval count for a min_roles_in_agreement of 2? If Bob also delegates to Daniela, how can he know to also check for her approval?

If Charlie's approval is not sufficient, the resolution of multi-role delegations in TAP 3 will need to keep track of which roles have been applied to min_roles_in_agreement. This will require the DFS to check all roles rather than returning after the first match, which could impact the efficiency of TUF.

This issue came out of a discussion about determining keyids.

Start with TAP 3 and the linked discussion in TUF PR 112 to determine whether repeated use of the same role counts toward min_roles_in_agreement and how delegated approvals should be discovered. The issue does not name implementation files or tests; done would require an agreed specification and a defined impact on the DFS resolution process.