jschoubben
0 Followers · 0 Following
  • Joined on 2020-06-18
Repositories
4
 Projects Packages Public Activity Starred Repositories
jschoubben pushed to design/47-the-grants-step at novox/hq 2026-10-11 17:22:07 +00:00
34bdb1a34f Give ADR 0298 its place in to-be 47: the bus's grants arrive before a walk's gate (issue 490)
jschoubben created branch design/47-the-grants-step in novox/hq 2026-10-11 17:22:07 +00:00
jschoubben pushed to adr-0297-log-verbs at novox/mesh-tools 2026-10-11 17:20:33 +00:00
82aefe1988 Refuse a credential in a log entry and take a full 256 KiB value with its expect header (ADR 0297 review)
jschoubben pushed to adr-0297-log-verbs at novox/mesh-tools 2026-10-11 17:18:54 +00:00
d535dd5322 Serve a module's log verbs so its record outlives a bucket's cap and the events' week (ADR 0297, issues 501, 502)
jschoubben created branch adr-0297-log-verbs in novox/mesh-tools 2026-10-11 17:18:54 +00:00
0f853e93fa Exempt only the user list's content from the grants step's guard, and test the guard in the send itself (review of #230)
jschoubben created branch adr-0297-log in novox/mesh-sdk 2026-10-11 17:16:18 +00:00
jschoubben pushed to adr-0297-log at novox/mesh-sdk 2026-10-11 17:16:18 +00:00
eaed934629 go: a module appends to and reads its log through the runtime, so its record outlives a bucket's history (hq ADR 0297)
78205d7405 Judge the grants step on the declaration it sends, so nothing composed between the check and the send slips through (review of #230)
538c4d5115 Merge main (#227) into the grants step's branch
fad655532d Merge pull request 'A declaration says the assignment generation it came from, and every send is recorded (issue 234)' (#227) from fix/234-a-declaration-says-the-generation-it-came-from into main
0c675bcdb5 Merge remote-tracking branch 'origin/main' into fix/234-a-declaration-says-the-generation-it-came-from
5dd0e3c056 Raise S20 for every generation refusal, ask for a push when the counter was behind, and write a send's generation with its digest (hq issue 234 review)
Compare 8 commits »
fbeffb608d Refuse the grants step when its send would change more than the bus's user list (review of #230)
e1367d185a Send the bus's user list alone before a walk's gate, so a new grant is on the bus when the first machine is judged (issue 490)
0c675bcdb5 Merge remote-tracking branch 'origin/main' into fix/234-a-declaration-says-the-generation-it-came-from
9edc5c758d Merge pull request 'A controller test judges the runtime's daemon.json by the docker module's own keys, not live-restore alone (issue 498)' (#229) from fix/498-docker-gives-log-rotation-too into main
483c387b72 Judge the runtime's daemon.json against the docker module's own keys, not a frozen copy
fe2e5e91b5 Merge pull request 'A check never sees the forge credential, and what it publishes is redacted (issue 462)' (#226) from fix/462-a-check-never-sees-the-forge-credential into main
51db0b5273 Merge pull request 'broker: each credential may call tools only in its own name on the caller-named subjects (hq issue 365)' (#224) from fix/365-a-tool-call-names-its-caller into main
Compare 13 commits »
jschoubben pushed to fix/496-a-resolved-path-is-judged at novox/mesh-controller 2026-10-11 16:59:11 +00:00
8115f1ac42 Judge a definition's resolved paths where the definition is judged, by the node-engine's own rules, so a refusal never freezes a machine (review of #228, issue 496)
93289dc88b Merge remote-tracking branch 'origin/main' into fix/496-a-resolved-path-is-judged
9edc5c758d Merge pull request 'A controller test judges the runtime's daemon.json by the docker module's own keys, not live-restore alone (issue 498)' (#229) from fix/498-docker-gives-log-rotation-too into main
483c387b72 Judge the runtime's daemon.json against the docker module's own keys, not a frozen copy
Compare 4 commits »
4695dfc0a2 Say both a gated module and a machine stop, and count skipped apart (review of #83)
jschoubben created branch fix/498-docker-gives-log-rotation-too in novox/mesh-controller 2026-10-11 16:46:34 +00:00
483c387b72 Judge the runtime's daemon.json against the docker module's own keys, not a frozen copy
jschoubben created branch fix/495-a-refused-directory-gates-its-module in novox/mesh-host 2026-10-11 16:19:26 +00:00
7233ddbe35 Gate a module behind its refused directory and judge a file by the placement guard (issue 495)
1acfed4add Test that a refused directory gates its module and a file meets the same guard (issue 495)
Compare 2 commits »
jschoubben pushed to fix/496-a-resolved-path-is-judged at novox/mesh-controller 2026-10-11 16:19:25 +00:00
174c8b5d53 Judge every path the controller resolves for a directory or file where the plan is composed, so the merge gate refuses a directory in Docker's data (issue 496)