jschoubben

jschoubben deleted branch multiple-fixes from novox/hq

2026-09-21 19:05:14 +00:00

jschoubben pushed to main at novox/hq

2026-09-21 19:05:14 +00:00

f11824d299 Merge pull request 'Multiple fixes: ADRs 0094–0097; issues 069, 049, 046 resolved; 064's image half decided' (#67) from multiple-fixes into main

43ca9ce0ae ADR 0097: an undeclared base is said, not yet refused

71072e240d ADR 0097: a vendor image is a declared build input; issue 064's image half decided; design 18 amended

8d981e21b1 ADR 0096: an upstream image is copied between registries; issue 046 resolved; design 18 amended

39a01b7f7e ADR 0095: the control plane is the way to ask a module; issue 049 resolved; design 19 amended

Compare 6 commits »

jschoubben merged pull request novox/hq#67

2026-09-21 19:05:13 +00:00

Multiple fixes: ADRs 0094–0097; issues 069, 049, 046 resolved; 064's image half decided

jschoubben pushed to main at novox/mesh-lab

2026-09-21 19:05:13 +00:00

543ccb7380 Merge pull request 'Multiple fixes: the vault bed keeps two secrets, the confluence bed asks through the control plane, the runtime build installs its SDK and speaks' (#44) from multiple-fixes into main

85dc827660 The confluence bed asks a tool through the control plane, and the tool answers

2f11a29c4d The runtime build installs the module's SDK itself and shows its compiler's output

64c081d025 The vault bed installs a consumer that keeps two secrets, and both are delivered and rotated

Compare 4 commits »

jschoubben deleted branch multiple-fixes from novox/mesh-controller

2026-09-21 19:05:13 +00:00

jschoubben deleted branch multiple-fixes from novox/mesh-lab

2026-09-21 19:05:13 +00:00

jschoubben pushed to main at novox/mesh-controller

2026-09-21 19:05:13 +00:00

d7dab9c09f Merge pull request 'Multiple fixes: several secrets per module (069), ask a module's tool (049), copy an upstream image (046), declare a vendor image (064)' (#38) from multiple-fixes into main

9f3790dcda Review: one local name is still a local name; a local name is unique; recovery knows it; recipes read as instructions; a tag before a digest; ask fails at once when nothing serves

e81f352979 An undeclared COPY --from is refused; an undeclared FROM is said, not yet refused

6f6e1244d4 A build declares the vendor image it stands on, and a recipe fetches nothing undeclared

412599de9a An upstream image is copied between registries, never through a machine's image store

Compare 10 commits »

jschoubben merged pull request novox/mesh-lab#44

2026-09-21 19:05:12 +00:00

Multiple fixes: the vault bed keeps two secrets, the confluence bed asks through the control plane, the runtime build installs its SDK and speaks

jschoubben merged pull request novox/mesh-controller#38

2026-09-21 19:05:11 +00:00

Multiple fixes: several secrets per module (069), ask a module's tool (049), copy an upstream image (046), declare a vendor image (064)

jschoubben pushed to multiple-fixes at novox/mesh-controller

2026-09-21 19:03:24 +00:00

9f3790dcda Review: one local name is still a local name; a local name is unique; recovery knows it; recipes read as instructions; a tag before a digest; ask fails at once when nothing serves

jschoubben created pull request novox/hq#67

2026-09-21 18:49:18 +00:00

Multiple fixes: ADRs 0094–0097; issues 069, 049, 046 resolved; 064's image half decided

jschoubben created pull request novox/mesh-lab#44

2026-09-21 18:49:17 +00:00

Multiple fixes: the vault bed keeps two secrets, the confluence bed asks through the control plane, the runtime build installs its SDK and speaks

jschoubben created pull request novox/mesh-controller#38

2026-09-21 18:49:16 +00:00

Multiple fixes: several secrets per module (069), ask a module's tool (049), copy an upstream image (046), declare a vendor image (064)

jschoubben pushed to multiple-fixes at novox/hq

2026-09-21 18:48:34 +00:00

43ca9ce0ae ADR 0097: an undeclared base is said, not yet refused

71072e240d ADR 0097: a vendor image is a declared build input; issue 064's image half decided; design 18 amended

8d981e21b1 ADR 0096: an upstream image is copied between registries; issue 046 resolved; design 18 amended

39a01b7f7e ADR 0095: the control plane is the way to ask a module; issue 049 resolved; design 19 amended

acc9824949 ADR 0094: a module may hold several secrets from one provider; issue 069 resolved; design 24 amended

Compare 5 commits »

jschoubben created branch multiple-fixes in novox/hq

2026-09-21 18:48:34 +00:00

jschoubben pushed to multiple-fixes at novox/mesh-controller

2026-09-21 18:48:34 +00:00

e81f352979 An undeclared COPY --from is refused; an undeclared FROM is said, not yet refused

6f6e1244d4 A build declares the vendor image it stands on, and a recipe fetches nothing undeclared

412599de9a An upstream image is copied between registries, never through a machine's image store

5049d201c6 A provider keeps one grant file per holder, with the local name in its id and path

3e5c010c5e A need is kept once per provision, consumer, local name and provider

Compare 8 commits »

jschoubben created branch multiple-fixes in novox/mesh-controller

2026-09-21 18:48:34 +00:00

jschoubben pushed to multiple-fixes at novox/mesh-lab

2026-09-21 18:48:34 +00:00

85dc827660 The confluence bed asks a tool through the control plane, and the tool answers

2f11a29c4d The runtime build installs the module's SDK itself and shows its compiler's output

64c081d025 The vault bed installs a consumer that keeps two secrets, and both are delivered and rotated

Compare 3 commits »

jschoubben created branch multiple-fixes in novox/mesh-lab

2026-09-21 18:48:34 +00:00

jschoubben pushed to main at novox/mesh-lab

2026-09-21 17:36:45 +00:00

467416728e Merge pull request 'The run rebuilds the module runtimes its beds stock (075); two mechanism beds read the catalogue's redis (074)' (#43) from feat/mesh-tests-and-runtimes into main

e4c924a85e The grant bed's consumer takes a slug: its derived identity was one character over what a backend keeps

1b2443690d Two mechanism beds install the catalogue's redis with the vault beside it

d7959001dd The run rebuilds the module runtimes its beds stock

Compare 4 commits »