jschoubben

jschoubben pushed to multiple-fixes at novox/hq

2026-09-21 21:35:31 +00:00

0e0f0298c6 ADR 0099: a step that runs once names what it reads; issues 077 and 078 resolved; designs 08 and 20 amended

jschoubben created branch multiple-fixes in novox/hq

2026-09-21 21:35:31 +00:00

jschoubben pushed to multiple-fixes at novox/mesh-lab

2026-09-21 21:35:30 +00:00

080150addb provider-on-backend-network: no longer names a retired bed

fd1e5499d0 Retire provider-uses-mesh-credential: the grant end-to-end bed proves it against the catalogue's redis, with the mesh writing the contributions; its no-seal-key assertion moves there (issue 074)

0d8eac88c3 whole-mesh-full delivers amqp-email-forwarder's smtp-password under the name the module declares (found by issue 078's refusal)

2e0f11dfc2 Three beds give their fixtures names that are no catalogue module's (issue 074)

Compare 4 commits »

jschoubben created branch multiple-fixes in novox/mesh-lab

2026-09-21 21:35:30 +00:00

jschoubben pushed to multiple-fixes at novox/mesh-catalog

2026-09-21 21:35:30 +00:00

6fb2003b8d route-proxy: the trust gate names the binding it reads and runs again when the authority moved; the server follows it (ADR 0099)

jschoubben created branch multiple-fixes in novox/mesh-catalog

2026-09-21 21:35:29 +00:00

jschoubben pushed to multiple-fixes at novox/mesh-host

2026-09-21 21:35:28 +00:00

8da78de210 A run-once step names what it reads and runs again when it changed (novox/hq ADR 0099, issue 077)

jschoubben created branch multiple-fixes in novox/mesh-host

2026-09-21 21:35:28 +00:00

jschoubben created branch multiple-fixes in novox/mesh-controller

2026-09-21 21:35:27 +00:00

jschoubben pushed to multiple-fixes at novox/mesh-controller

2026-09-21 21:35:27 +00:00

35c5c2bb9b secret accept is refused for a name the module does not declare, and a pair delivery for a requirement or local it has not got (novox/hq issue 078)

e4da83496f A run-once step may name what it reads: the pair run-once + restart-on is no longer refused (novox/hq ADR 0099)

Compare 2 commits »

jschoubben merged pull request novox/hq#69

2026-09-21 20:58:27 +00:00

ADR 0098; issue 076 opened and resolved; ADR 0097's base refusal live; ADR 0096 proven against the public hub; 074 down to one bed

jschoubben deleted branch multiple-fixes from novox/hq

2026-09-21 20:58:27 +00:00

jschoubben pushed to main at novox/hq

2026-09-21 20:58:27 +00:00

c2a81cbb20 Merge pull request 'ADR 0098; issue 076 opened and resolved; ADR 0097's base refusal live; ADR 0096 proven against the public hub; 074 down to one bed' (#69) from multiple-fixes into main

6bc9df4b49 Review corrections: 076 and ADR 0098 say what the authority could and could not do; issues 077 (a fetched fact is fetched once) and 078 (secret accept takes any name) opened

6d3cb60949 Issue 076: the route-forwarding bed proves ADR 0098; what the run taught about the overlay

75af72ca27 ADR 0096: the copy is proven against the public hub by the genesis bed

252c6042e8 ADR 0098: a fact a provider makes at first start is fetched from it; issue 076 resolved; design 08 amended; 074 down to one bed

Compare 6 commits »

jschoubben deleted branch multiple-fixes from novox/mesh-lab

2026-09-21 20:58:26 +00:00

jschoubben deleted branch multiple-fixes from novox/mesh-catalog

2026-09-21 20:58:26 +00:00

jschoubben pushed to main at novox/mesh-lab

2026-09-21 20:58:26 +00:00

e1739b1caf Merge pull request 'The route-forwarding bed installs the catalogue's authority, proxy and consumer; the whole-mesh bed installs the vault first' (#46) from multiple-fixes into main

b0eddd28d8 build-route-proxy-image.sh builds FROM the bases the manifest declares

2ce130c256 whole-mesh-full: an own-secret is declared under own-secrets

e64d296c80 whole-mesh-full: issue a module with an own-secret, not only one with a broker account

acb8d3da88 whole-mesh-full: the vault before the modules that keep secrets in it; no operator root or app secrets delivered (ADRs 0094, 0098)

Compare 10 commits »

jschoubben merged pull request novox/mesh-lab#46

2026-09-21 20:58:25 +00:00

The route-forwarding bed installs the catalogue's authority, proxy and consumer; the whole-mesh bed installs the vault first

jschoubben pushed to main at novox/mesh-catalog

2026-09-21 20:58:25 +00:00

64d62978f6 Merge pull request 'Multiple fixes: five modules keep their secrets from the vault (ADR 0094), the authority makes its own root (076), the builder on the host network, route-proxy declares its bases' (#34) from multiple-fixes into main

ac651c7ac2 route-proxy: the trust container names its artifact

1c964cd571 route-proxy: the trust gate retries with a timeout and checks for a certificate; its images are declared artifacts (ADRs 0096, 0097, 0098)

28b8feebfc The authority makes its own root at first start, and the proxy fetches it through a gate

82256fcdb0 The builder runs on the machine's network: it copies images into the mesh's registry itself now

Compare 6 commits »

jschoubben merged pull request novox/mesh-catalog#34

2026-09-21 20:58:24 +00:00

Multiple fixes: five modules keep their secrets from the vault (ADR 0094), the authority makes its own root (076), the builder on the host network, route-proxy declares its bases

jschoubben deleted branch multiple-fixes from novox/mesh-tools

2026-09-21 20:58:24 +00:00