jschoubben
  • Joined on 2020-06-18
jschoubben pushed to feat/asks-answered-on-any-channel at novox/mesh-tools 2026-10-09 09:09:05 +00:00
127047edd6 Serve a module from a runtime on its own account instead of switching users, keep bus words from bundles, and never give up a channel's work (hq ADR 0259 revision)
c6087129ce Tell a bundle the kinds its membership names
7b4428c510 Name the worker a piece of work came from, so a bundle taking two is handed each to its own handler
6d9906b6c9 Carry a bundle's seat traffic under its own name and kind, and start a module as its own account (hq ADR 0259)
66de6774e0 Merge pull request 'Say what becomes of an event a handler gives up on (hq issue 330, ADR 0264)' (#24) from fix/330-a-message-given-up-on-is-kept into main
Compare 6 commits »
926dbd7a97 Fill machine facts in a user's home, so an agent account named with a home is made there
db702312af Pin the node-engine at its pull request rebased onto main
d7fe5b609b Pin the node-engine at the head that refuses a placement at the machine's own
b4dff64ae0 Refuse a plans line that acts wherever its subcommand stands
2b8a28adab Pin the node-engine at the head that judges an opened file's kind and links
Compare 43 commits »
ee314a26ca ADR 0266: say where the boundary stands on 2026-10-09, and the rollout's order
e215dd95c4 ADR 0266: record the command allow list, the judge's final lists, and the store gap
dbc3ec40e0 ADR 0266: say it detects rather than prevents, and bound what review found
537e5b733b ADR 0266: on the control node agents run under an account of their own
d81ae38970 Merge pull request 'Issue 340: an agent can plant a hook in every agent session on the mesh' (#240) from issues/340-an-agent-can-plant-a-hook-in-every-session into main
Compare 71 commits »
jschoubben pushed to feat/the-agent-account-is-declared at novox/mesh-catalog 2026-10-09 09:03:17 +00:00
eacda6e3ae claude-code: make the agent account at the home its node names
6d32975ca6 Refuse the agent-home gap reached through a module's own directory or a literal home
87862f3bf5 Refuse an archive or a file written into under the agent's home
9afea75f93 sudo: give every command run through sudo a terminal of its own
17b0ac9f6c claude-code: declare the account agents run as and the command that starts it
Compare 58 commits »
jschoubben pushed to feat/the-agent-runs-as-its-own-account at novox/mesh-catalog 2026-10-09 09:03:17 +00:00
c8fb0016f2 Test that a sealed grant hides its words, not two letters
dae7bb848d restic: restore away from a directory another account owns
b57e6e8144 claude-code: write the agent's home as its own account where it has one
7339ce8556 Merge pull request 'claude-code: refuse registering what a session runs (hq issue 340)' (#149) from fix/340-what-a-session-runs-is-set-at-the-terminal into main
d984eb84d6 claude-code: remove from or restore to only an agent account's own home
Compare 53 commits »
jschoubben pushed to feat/asks-answered-on-any-channel at novox/mesh-sdk 2026-10-09 08:15:11 +00:00
d4077b473e Bind a warrant to the exact ask and each option to the act it performs (hq ADR 0259 §6)
jschoubben pushed to feat/an-agent-account-never-becomes-root at novox/mesh-host 2026-10-09 08:11:17 +00:00
b28d7bbcbf Search for setuid programs in the background, and judge each polkit rule alone
e2e8be72fa Keep main's placement guard, and refuse only an archive or a written-into file below an agent's home
d4af8bba1b Judge an opened file's kind and links below a home, and more ways to root
02a1c5f753 Refuse to take over a system account as one that never becomes root
b89b143fe7 Follow no link below a home as root, and judge more ways to root
Compare 27 commits »
cdf0e71d87 Issue 340: removing from or restoring to the operator's own home is refused too
1fe6ea4ee4 claude-code: start only the tool servers set at the controller's terminal
d984eb84d6 claude-code: remove from or restore to only an agent account's own home
Compare 2 commits »
d984eb84d6 claude-code: remove from or restore to only an agent account's own home
0badde3a56 Issue 340: say plainly which test refuses the new url
523bb9c55a Issue 340: the home scope reached the operator's own home, and bus text still renders
c6963aa809 claude-code: start only the tool servers set at the controller's terminal
3677af6079 claude-code: write the home scope only into an agent account's own home
e139fb4dd9 claude-code: set shared agent text at the controller's terminal, for now
Compare 3 commits »
3677af6079 claude-code: write the home scope only into an agent account's own home
e139fb4dd9 claude-code: set shared agent text at the controller's terminal, for now
Compare 2 commits »
8a6f19e457 Issue 340: record the operator's decisions, and open 342 for passwords taken as settings
jschoubben created branch fix/340-tool-servers-only-from-the-terminal in novox/mesh-catalog 2026-10-09 07:27:26 +00:00
dc6a8a5cfb claude-code: start only the tool servers set at the controller's terminal
03bb6d17b9 claude-code: set shared agent text at the controller's terminal, for now
jschoubben pushed to replays/336-a-send-held-for-the-bus-step at novox/mesh-lab 2026-10-09 07:25:32 +00:00
fb5bb1e3de Register R336: a send held for the bus's planned step is told to the operator
jschoubben created branch replays/336-a-send-held-for-the-bus-step in novox/mesh-lab 2026-10-09 07:25:32 +00:00