How to define "correct" behavior?


Does it advertise invalid routes?
Validity
Does every valid path have a corresponding route?
Visibility
Given a set of choices, will it converge to a unique, stable answer?
Safety
Is that answer affected by the ordering of messages or the set of available routes?
Determinism
Does the protocol expose information?
Information-flow control