> > What I would refuse in the event of log corruption is continuing
> > normal database operations.
>
> Hmm. We could do that if we had some notion of a read-only operating
> mode, perhaps. But we don't have one now and I don't want to add it
> for 7.1. Can we agree to look at this more for 7.2?
We need not in full support of read-only mode - just set some flag in
shmem and disallow write ops. I think 7.1.1 or so is good for that.
Vadim