Expanding the list of Public Subnets on the Internet Computer

[Vivienne]

@Lorimer

Presumably when a subnet is removed from the list of NULL ‘who’ principals, it defaults to being restricted to the root NNS canister principal (exclusively requiring NNS proposals to deploy canisters)?

No, not even NNS root can then create new canisters on that subnet unless it is explicitly allowlisted as every other principal.

If a principal already controls a canister on that subnet, then that principal can still a) upgrade the existing canisters and b) use the existing canisters to create new canisters on that subnet using the management canister.