Block a user
c3544b6a17
Merge pull request 'buscompose: the grants part may create a placed module's declared buckets, logs and streams, creation only (issue 1790, ADR 0547 clause 1 exception)' (#86) from fix/1790-grants-create-buckets into main
136fa8b2a8
Say how a declared bucket and module stream are created, so the grants part makes the same stream the controller does
8f6ee2fd18
Let the grants part create the streams manifests declare, so a new module state no longer waits for a controller start
buscompose: the grants part may create a placed module's declared buckets, logs and streams, creation only (issue 1790, ADR 0547 clause 1 exception)
buscompose: the grants part may create a placed module's declared buckets, logs and streams, creation only (issue 1790, ADR 0547 clause 1 exception)
mesh-delivery: the operator's Approve of this pull request's merge into main is ended: a head it covers moved on: the heads it covers are no longer the group's heads. Nothing is merged on it. The…
mesh-grants: create a declared module's missing buckets, logs and streams on the event; publish memberships past retired seat verbs (issues 1790, 1945)
Delivery novox/mesh-delivery@12f16bbebd40 — ready since 2026-10-26T08:16:47Z
Group fix/1790-grants-create-buckets: novox/mesh-controller@6927b02d4d58,…
Broker: the grants part may create a placed module's declared buckets, logs and streams, creation only (issue 1790; the operator's one-grant exception)
mesh-delivery: the operator's Approve of this pull request's merge into main is ended: a head it covers moved on: the heads it covers are no longer the group's heads. Nothing is merged on it. The…
mesh-grants: create a declared module's missing buckets, logs and streams on the event; publish memberships past retired seat verbs (issues 1790, 1945)
buscompose: the grants part may create a placed module's declared buckets, logs and streams, creation only (issue 1790, ADR 0547 clause 1 exception)
mesh-delivery: the operator's Approve of this pull request's merge into main is ended: a head it covers moved on: the heads it covers are no longer the group's heads. Nothing is merged on it. The…
Broker: the grants part may create a placed module's declared buckets, logs and streams, creation only (issue 1790; the operator's one-grant exception)
Delivery novox/mesh-controller@6927b02d4d58 — ready since 2026-10-26T08:16:39Z
Group fix/1790-grants-create-buckets: novox/mesh-controller@6927b02d4d58…
Broker: the grants part may create a placed module's declared buckets, logs and streams, creation only (issue 1790; the operator's one-grant exception)
buscompose: the grants part may create a placed module's declared buckets, logs and streams, creation only (issue 1790, ADR 0547 clause 1 exception)
Delivery novox/mesh-sdk@136fa8b2a896 — ready since 2026-10-26T08:16:35Z
Transitions
- 2026-10-26 08:16 (new) → proposed (announced): novox/mesh-sdk#86's…
buscompose: the grants part may create a placed module's declared buckets, logs and streams, creation only (issue 1790, ADR 0547 clause 1 exception)
585551722a
Merge pull request 'Design 47 follows ADR 0547: node agents compose, the grants part composes who may say what, the bus node writes the user list, and the controller leaves build and delivery in three milestones (issue 1945)' (#478) from fix/1945-user-list-follows-r into main
f1c50d3e01
Design 47: the assigner's acceptance test names its six rules, as ADR 0547 §4 leaves them; the bus node follows the controller's list until the third milestone, for hand-back; placement stays where it is for now (issue 1126)
d70791ddee
Design 47: sentences that still named the controller as composer, issuer or reader of grants follow ADR 0547 as amended
d94f8a05a8
Design 47 follows ADR 0547: node agents compose their own modules, a grants part composes who may say what, the bus node writes the user list alone, and the controller leaves build and delivery in three milestones
Design 47 follows ADR 0547: node agents compose, the grants part composes who may say what, the bus node writes the user list, and the controller leaves build and delivery in three milestones (issue 1945)
mesh-tools
deleted branch fix/1945-vault-hashing from novox/mesh-delivery
2026-10-26 07:48:10 +00:00
13380e3d0e
Merge pull request 'mesh-grants: the shadow user list takes each user's hash from the vault and says per user whether one is held (issue 1945, ADR 0547 clause 9)' (#57) from fix/1945-vault-hashing into main
9132b6a296
mesh-grants: take each user's hash from the vault's bus-accounts and say per user whether one is held, so take-over waits until every user has a credential
mesh-grants: the shadow user list takes each user's hash from the vault and says per user whether one is held (issue 1945, ADR 0547 clause 9)
mesh-tools
deleted branch fix/1945-vault-own-read from novox/mesh-catalog
2026-10-26 07:48:07 +00:00
22381d7522
Merge pull request 'Vault: read own secrets' generations, and hash each bus account it is handed for the grants part (issue 1945, ADR 0547 clause 9)' (#486) from fix/1945-vault-own-read into main
1c55e5d44d
Vault: take and hash a process's own bus account (broker-<process id>) as a covered account, so take-over is not held by every process user
32b912cfe5
Vault: hash each bus account it is handed into bus-accounts.<user>, once per generation, so the grants part can compose the user list without the controller
e572937d97
Vault: secret_own reads the module-own secrets it keeps, as fingerprints, so a generation can be told without the value