jschoubben
0 Followers · 0 Following
  • Joined on 2020-06-18
Repositories
4
 Projects Packages Public Activity Starred Repositories
080c113d69 Let the forge's tools never weaken protection or merge past the checks
6751f75e3e Do not raise agent-can-become-root while the first setuid search is still within its bound
c816da16fa Put back on a failed gate only a build of the module's own repository
e579512d95 Register a module only from the repository the catalogue builds it from
Compare 2 commits »
jschoubben created branch feat/a-secret-given-at-the-desk in novox/mesh-host 2026-10-09 09:24:54 +00:00
jschoubben pushed to feat/a-secret-given-at-the-desk at novox/mesh-host 2026-10-09 09:24:54 +00:00
b33f88c121 Carry the controller's grant to ask the desk for a secret in the installer's first user list (hq ADR 0259 §10)
jschoubben pushed to proofs/asks-answered-on-the-phone at novox/mesh-lab 2026-10-09 09:24:21 +00:00
8d24e7bbb5 asks: a granted publish is the control for every refusal the proof reads as the bus's
jschoubben pushed to decision/asks-answered-on-any-channel at novox/hq 2026-10-09 09:17:25 +00:00
2946fda261 ADR 0259: an ask the controller could not deliver is a condition of its own
ec4f42bc5c Say loudly when a condition that needs the operator could not be asked on any channel (hq ADR 0259)
jschoubben pushed to decision/asks-answered-on-any-channel at novox/hq 2026-10-09 09:09:27 +00:00
02ec566623 ADR 0259: the drill as the live acceptance, another account's answer told to the operator, an ask's message never folded
812a011bfa ADR 0259: bind a warrant to the exact ask and act, count the login shell where execute is served (ADR 0268), fail closed where root is not measured, and keep what is trusted out of settings (issue 342)
cb3860c53f Say how a module of its own account is served, and how the root probe is checked
8e8cfd47de Record the operator's choice for the control node, and the second way an agent reaches root there
40812a7734 Name the router, not the controller's retired verbs, where the glossary and to-be 46 still did
Compare 122 commits »
jschoubben pushed to proofs/asks-answered-on-the-phone at novox/mesh-lab 2026-10-09 09:09:18 +00:00
3a486014fc Prove the operator's answers end to end before anybody uses them (hq ADR 0259)
jschoubben created branch proofs/asks-answered-on-the-phone in novox/mesh-lab 2026-10-09 09:09:18 +00:00
jschoubben pushed to feat/a-secret-given-at-the-desk at novox/mesh-catalog 2026-10-09 09:09:17 +00:00
a33d334008 Serve node-launcher's hidden prompt, answering sealed to the asker, so a secret typed at the desk is never in the clear (hq ADR 0259 §10)
7339ce8556 Merge pull request 'claude-code: refuse registering what a session runs (hq issue 340)' (#149) from fix/340-what-a-session-runs-is-set-at-the-terminal into main
d984eb84d6 claude-code: remove from or restore to only an agent account's own home
3677af6079 claude-code: write the home scope only into an agent account's own home
e139fb4dd9 claude-code: set shared agent text at the controller's terminal, for now
Compare 57 commits »
dda04be69a telegram, desk-channel: move to mesh-sdk d4077b4, where a warrant names the ask's digest (hq ADR 0259 §6)
50f437fbb1 Run telegram as its own account in a runtime of its own, keep its offset per update, and keep no copy of a secret on the desk (hq ADR 0259 §8)
cc5ddf86c1 Add telegram and the desk as channels of their own, each judging nothing and holding only its own secret (hq ADR 0259)
7b0b02fa32 messenger: send an ask's message alone even when only one answer can be given there
8ee75ec1bd messenger: tell the operator, by name and number, when another account answers a question meant for them
Compare 56 commits »
jschoubben pushed to feat/asks-answered-on-any-channel at novox/mesh-catalog 2026-10-09 09:09:13 +00:00
7b0b02fa32 messenger: send an ask's message alone even when only one answer can be given there
8ee75ec1bd messenger: tell the operator, by name and number, when another account answers a question meant for them
9e4f7fbe50 messenger: name the ask's digest in every warrant, and bind the router's own asks to their act (hq ADR 0259 §6)
775eb04a09 Show a link's code as a message no channel keeps
ac9de9b9cd Run the router as its own account, ask unlinking of the linked account, and take no approval where an agent can become root (hq ADR 0259 §7, §8)
Compare 53 commits »
jschoubben pushed to feat/the-controller-asks-the-operator at novox/mesh-host 2026-10-09 09:09:10 +00:00
e33dba74ca Carry the controller's grants to ask the operator and act on a warrant in the installer's first user list, so a mesh raised from it is not refused them (hq ADR 0259)
a390bce5f2 Merge pull request 'Give a service's held state its own field and key, so main compiles again' (#67) from fix/store-declared-redeclared into main
c2bae14994 Give a service's held state its own field and key, so main compiles again
690966d847 Merge pull request 'Start again on removal what the mesh's own declaration stopped (hq ADR 0269)' (#66) from feat/give-back-a-unit-the-mesh-stopped into main
d28ca959f0 Merge pull request 'Issue 339 follow-up to #64: ask the running runtimes where they keep their data, and read every form a unit says it in' (#65) from fix/339-runtime-roots-asked into main
Compare 21 commits »
jschoubben pushed to feat/a-secret-given-at-the-desk at novox/mesh-controller 2026-10-09 09:09:09 +00:00
cf8ada7699 Take a module's own secret through a hidden prompt on the operator's desk, so a bot token never passes through an agent's session (hq ADR 0259 §10)
4d60628f37 Merge pull request 'A mergeable file's own keys are the terminal's (hq issue 340)' (#172) from fix/340-a-mergeable-files-own-keys-are-the-terminals into main
b13a0f71a4 Merge pull request 'Tell the operator at once when sends wait for the bus's planned step, and say it before the merge (hq issue 336)' (#173) from fix/336-bus-step-waiting into main
822e52123c Say S17 clears once the new bus is sent, as it does
9a7ae131cb TestReplay336 reads the bus call in its mesh form
Compare 61 commits »
1e361a17a9 Add drill: an ask the operator starts at the controller's terminal, whose approval performs nothing and is recorded (hq ADR 0259)
8312f5bdee Compose and raise the bus of the lab's proof of the operator's answers, as this controller would (hq ADR 0259)
a66c13719d Bind each asked option to the exact act, and perform only that act on its warrant (hq ADR 0259 §6)
648b07b2a5 Ask at most three at a time, wait out a refusal, need a router, and act only on a claimed open ask, as the review asked (hq ADR 0259)
c0f4daaaa5 Ask the operator for a condition's answers and act on the warrant, so release, stop, start and restart can be answered from any channel that proves who answered (hq ADR 0259)
Compare 58 commits »
jschoubben pushed to feat/asks-answered-on-any-channel at novox/mesh-controller 2026-10-09 09:09:06 +00:00
5ef52011c9 Raise agent-root where who can become root is not measured, so the router never reads a missing measure as a no (hq ADR 0259 §8)
f444e8599b Count the login shell where its execute is served, not where its seat is held (hq ADR 0268)
93a50c0fd5 Serve a trusted holder from a runtime of its own account, refuse it in the machine's runtime, and say while an agent can become root where it runs (hq ADR 0259 §8)
a62e5e05de Carry a channel's capabilities on its claim and tell the router every kind, so an answer is judged by the controller's record and not the channel's word
b4c67282ab Grant a seat's traffic by caller and by kind, so an ask's asker and a channel's kind are facts the bus enforces (hq ADR 0259)
Compare 53 commits »