jschoubben
0 Followers · 0 Following
  • Joined on 2020-06-18
Repositories
4
 Projects Packages Public Activity Starred Repositories
jschoubben pushed to decision/asks-answered-on-any-channel at novox/hq 2026-10-09 09:09:27 +00:00
02ec566623 ADR 0259: the drill as the live acceptance, another account's answer told to the operator, an ask's message never folded
812a011bfa ADR 0259: bind a warrant to the exact ask and act, count the login shell where execute is served (ADR 0268), fail closed where root is not measured, and keep what is trusted out of settings (issue 342)
cb3860c53f Say how a module of its own account is served, and how the root probe is checked
8e8cfd47de Record the operator's choice for the control node, and the second way an agent reaches root there
40812a7734 Name the router, not the controller's retired verbs, where the glossary and to-be 46 still did
Compare 122 commits »
jschoubben pushed to proofs/asks-answered-on-the-phone at novox/mesh-lab 2026-10-09 09:09:18 +00:00
3a486014fc Prove the operator's answers end to end before anybody uses them (hq ADR 0259)
jschoubben created branch proofs/asks-answered-on-the-phone in novox/mesh-lab 2026-10-09 09:09:18 +00:00
jschoubben pushed to feat/a-secret-given-at-the-desk at novox/mesh-catalog 2026-10-09 09:09:17 +00:00
a33d334008 Serve node-launcher's hidden prompt, answering sealed to the asker, so a secret typed at the desk is never in the clear (hq ADR 0259 §10)
7339ce8556 Merge pull request 'claude-code: refuse registering what a session runs (hq issue 340)' (#149) from fix/340-what-a-session-runs-is-set-at-the-terminal into main
d984eb84d6 claude-code: remove from or restore to only an agent account's own home
3677af6079 claude-code: write the home scope only into an agent account's own home
e139fb4dd9 claude-code: set shared agent text at the controller's terminal, for now
Compare 57 commits »
dda04be69a telegram, desk-channel: move to mesh-sdk d4077b4, where a warrant names the ask's digest (hq ADR 0259 §6)
50f437fbb1 Run telegram as its own account in a runtime of its own, keep its offset per update, and keep no copy of a secret on the desk (hq ADR 0259 §8)
cc5ddf86c1 Add telegram and the desk as channels of their own, each judging nothing and holding only its own secret (hq ADR 0259)
7b0b02fa32 messenger: send an ask's message alone even when only one answer can be given there
8ee75ec1bd messenger: tell the operator, by name and number, when another account answers a question meant for them
Compare 56 commits »
jschoubben pushed to feat/asks-answered-on-any-channel at novox/mesh-catalog 2026-10-09 09:09:13 +00:00
7b0b02fa32 messenger: send an ask's message alone even when only one answer can be given there
8ee75ec1bd messenger: tell the operator, by name and number, when another account answers a question meant for them
9e4f7fbe50 messenger: name the ask's digest in every warrant, and bind the router's own asks to their act (hq ADR 0259 §6)
775eb04a09 Show a link's code as a message no channel keeps
ac9de9b9cd Run the router as its own account, ask unlinking of the linked account, and take no approval where an agent can become root (hq ADR 0259 §7, §8)
Compare 53 commits »
jschoubben pushed to feat/the-controller-asks-the-operator at novox/mesh-host 2026-10-09 09:09:10 +00:00
e33dba74ca Carry the controller's grants to ask the operator and act on a warrant in the installer's first user list, so a mesh raised from it is not refused them (hq ADR 0259)
a390bce5f2 Merge pull request 'Give a service's held state its own field and key, so main compiles again' (#67) from fix/store-declared-redeclared into main
c2bae14994 Give a service's held state its own field and key, so main compiles again
690966d847 Merge pull request 'Start again on removal what the mesh's own declaration stopped (hq ADR 0269)' (#66) from feat/give-back-a-unit-the-mesh-stopped into main
d28ca959f0 Merge pull request 'Issue 339 follow-up to #64: ask the running runtimes where they keep their data, and read every form a unit says it in' (#65) from fix/339-runtime-roots-asked into main
Compare 21 commits »
jschoubben pushed to feat/a-secret-given-at-the-desk at novox/mesh-controller 2026-10-09 09:09:09 +00:00
cf8ada7699 Take a module's own secret through a hidden prompt on the operator's desk, so a bot token never passes through an agent's session (hq ADR 0259 §10)
4d60628f37 Merge pull request 'A mergeable file's own keys are the terminal's (hq issue 340)' (#172) from fix/340-a-mergeable-files-own-keys-are-the-terminals into main
b13a0f71a4 Merge pull request 'Tell the operator at once when sends wait for the bus's planned step, and say it before the merge (hq issue 336)' (#173) from fix/336-bus-step-waiting into main
822e52123c Say S17 clears once the new bus is sent, as it does
9a7ae131cb TestReplay336 reads the bus call in its mesh form
Compare 61 commits »
1e361a17a9 Add drill: an ask the operator starts at the controller's terminal, whose approval performs nothing and is recorded (hq ADR 0259)
8312f5bdee Compose and raise the bus of the lab's proof of the operator's answers, as this controller would (hq ADR 0259)
a66c13719d Bind each asked option to the exact act, and perform only that act on its warrant (hq ADR 0259 §6)
648b07b2a5 Ask at most three at a time, wait out a refusal, need a router, and act only on a claimed open ask, as the review asked (hq ADR 0259)
c0f4daaaa5 Ask the operator for a condition's answers and act on the warrant, so release, stop, start and restart can be answered from any channel that proves who answered (hq ADR 0259)
Compare 58 commits »
jschoubben pushed to feat/asks-answered-on-any-channel at novox/mesh-controller 2026-10-09 09:09:06 +00:00
5ef52011c9 Raise agent-root where who can become root is not measured, so the router never reads a missing measure as a no (hq ADR 0259 §8)
f444e8599b Count the login shell where its execute is served, not where its seat is held (hq ADR 0268)
93a50c0fd5 Serve a trusted holder from a runtime of its own account, refuse it in the machine's runtime, and say while an agent can become root where it runs (hq ADR 0259 §8)
a62e5e05de Carry a channel's capabilities on its claim and tell the router every kind, so an answer is judged by the controller's record and not the channel's word
b4c67282ab Grant a seat's traffic by caller and by kind, so an ask's asker and a channel's kind are facts the bus enforces (hq ADR 0259)
Compare 53 commits »
jschoubben pushed to feat/asks-answered-on-any-channel at novox/mesh-tools 2026-10-09 09:09:05 +00:00
127047edd6 Serve a module from a runtime on its own account instead of switching users, keep bus words from bundles, and never give up a channel's work (hq ADR 0259 revision)
c6087129ce Tell a bundle the kinds its membership names
7b4428c510 Name the worker a piece of work came from, so a bundle taking two is handed each to its own handler
6d9906b6c9 Carry a bundle's seat traffic under its own name and kind, and start a module as its own account (hq ADR 0259)
66de6774e0 Merge pull request 'Say what becomes of an event a handler gives up on (hq issue 330, ADR 0264)' (#24) from fix/330-a-message-given-up-on-is-kept into main
Compare 6 commits »
926dbd7a97 Fill machine facts in a user's home, so an agent account named with a home is made there
db702312af Pin the node-engine at its pull request rebased onto main
d7fe5b609b Pin the node-engine at the head that refuses a placement at the machine's own
b4dff64ae0 Refuse a plans line that acts wherever its subcommand stands
2b8a28adab Pin the node-engine at the head that judges an opened file's kind and links
Compare 43 commits »
ee314a26ca ADR 0266: say where the boundary stands on 2026-10-09, and the rollout's order
e215dd95c4 ADR 0266: record the command allow list, the judge's final lists, and the store gap
dbc3ec40e0 ADR 0266: say it detects rather than prevents, and bound what review found
537e5b733b ADR 0266: on the control node agents run under an account of their own
d81ae38970 Merge pull request 'Issue 340: an agent can plant a hook in every agent session on the mesh' (#240) from issues/340-an-agent-can-plant-a-hook-in-every-session into main
Compare 71 commits »
jschoubben pushed to feat/the-agent-account-is-declared at novox/mesh-catalog 2026-10-09 09:03:17 +00:00
eacda6e3ae claude-code: make the agent account at the home its node names
6d32975ca6 Refuse the agent-home gap reached through a module's own directory or a literal home
87862f3bf5 Refuse an archive or a file written into under the agent's home
9afea75f93 sudo: give every command run through sudo a terminal of its own
17b0ac9f6c claude-code: declare the account agents run as and the command that starts it
Compare 58 commits »
jschoubben pushed to feat/the-agent-runs-as-its-own-account at novox/mesh-catalog 2026-10-09 09:03:17 +00:00
c8fb0016f2 Test that a sealed grant hides its words, not two letters
dae7bb848d restic: restore away from a directory another account owns
b57e6e8144 claude-code: write the agent's home as its own account where it has one
7339ce8556 Merge pull request 'claude-code: refuse registering what a session runs (hq issue 340)' (#149) from fix/340-what-a-session-runs-is-set-at-the-terminal into main
d984eb84d6 claude-code: remove from or restore to only an agent account's own home
Compare 53 commits »
jschoubben pushed to feat/asks-answered-on-any-channel at novox/mesh-sdk 2026-10-09 08:15:11 +00:00
d4077b473e Bind a warrant to the exact ask and each option to the act it performs (hq ADR 0259 §6)
jschoubben pushed to feat/an-agent-account-never-becomes-root at novox/mesh-host 2026-10-09 08:11:17 +00:00
b28d7bbcbf Search for setuid programs in the background, and judge each polkit rule alone
e2e8be72fa Keep main's placement guard, and refuse only an archive or a written-into file below an agent's home
d4af8bba1b Judge an opened file's kind and links below a home, and more ways to root
02a1c5f753 Refuse to take over a system account as one that never becomes root
b89b143fe7 Follow no link below a home as root, and judge more ways to root
Compare 27 commits »
cdf0e71d87 Issue 340: removing from or restoring to the operator's own home is refused too
1fe6ea4ee4 claude-code: start only the tool servers set at the controller's terminal
d984eb84d6 claude-code: remove from or restore to only an agent account's own home
Compare 2 commits »
d984eb84d6 claude-code: remove from or restore to only an agent account's own home