game theoretical failure: delegated advertiser platform

[Ivshti]

in OUTPACE, the follower signing any valid new state is OK cause the leader is distributing their own money - so a scenario where they steal their own money is a no-op

however, in practice, if an advertiser delegates another validator as an advertiser platform (that validator will be the leader) they can just assign all of the funds to themselves and the follower will sign

---

one solution is to use the getHealth math and have thresholds - less than 95% means unhealthy, but less than 90% means "don't sign new states"; at first glance, it seems this may cause a liveness failure in case one validator is temporarily offline, but then again, this is also an issue with the health in general (in light of this, see #48)

---

this applies to fees as well - the leader can cheat the follower out of a fee by using the same technique