Sounds like a reasonable proposal, I guess. (o:
Simple enough to both prove its correctness and implement a clear API around. Thank you.
I’ll bring it up internally, see what other people think. It’s not going to be high priority regardless (there are a bunch of things that need to be addressed yesterday, such as canister migration / subnet splitting, canisters holding ICP, etc.) but we can definitely think about it.