novox/hq
3
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

ADR 0101 accepted; raising a mesh names it

Browse Source
This commit is contained in:
jschoubben
2026-09-22 17:43:13 +02:00
parent 347bbce633
commit 1901a90d68
3 changed files with 7 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
02-DECISIONS/0101-a-machines-own-resolver-does-not-make-it-in-use.md
+1 -1
View File
@@ -1,6 +1,6 @@
--- ---
topic: the mesh topic: the mesh
status: proposed status: accepted
date: 2026-09-22 date: 2026-09-22
deciders: jochen deciders: jochen
reconstructed: false reconstructed: false
02-DECISIONS/README.md
+1 -1
View File
@@ -89,7 +89,7 @@ python3 00-META/checks/index.py fail if stale
- **0088** — [The foundation filters before anything listens](0088-the-foundation-filters-before-anything-listens.md) - **0088** — [The foundation filters before anything listens](0088-the-foundation-filters-before-anything-listens.md)
- **0090** — [A failure that repeats is said to be stuck](0090-a-failure-that-repeats-is-said-to-be-stuck.md) - **0090** — [A failure that repeats is said to be stuck](0090-a-failure-that-repeats-is-said-to-be-stuck.md)
- **0100** — [A node in use is adopted before it is converged](0100-a-node-in-use-is-adopted-before-it-is-converged.md) - **0100** — [A node in use is adopted before it is converged](0100-a-node-in-use-is-adopted-before-it-is-converged.md)
- **0101** — [A machine's own resolver does not make it in use](0101-a-machines-own-resolver-does-not-make-it-in-use.md) *(proposed)* - **0101** — [A machine's own resolver does not make it in use](0101-a-machines-own-resolver-does-not-make-it-in-use.md)
### Its tiers, from the bottom up ### Its tiers, from the bottom up
03-DESIGN/01-to-be/17-raising-a-mesh.md
+5 -2
View File
@@ -8,6 +8,7 @@ code:
updated: 2026-09-22 updated: 2026-09-22
decisions: decisions:
- 02-DECISIONS/0100-a-node-in-use-is-adopted-before-it-is-converged.md - 02-DECISIONS/0100-a-node-in-use-is-adopted-before-it-is-converged.md
- 02-DECISIONS/0101-a-machines-own-resolver-does-not-make-it-in-use.md
- 02-DECISIONS/0067-genesis-is-a-pivot.md - 02-DECISIONS/0067-genesis-is-a-pivot.md
- 02-DECISIONS/0069-a-module-is-a-repository-and-a-path.md - 02-DECISIONS/0069-a-module-is-a-repository-and-a-path.md
- 02-DECISIONS/0006-the-substrate-and-the-control-plane.md - 02-DECISIONS/0006-the-substrate-and-the-control-plane.md
@@ -113,8 +114,10 @@ checks the private network's range does not overlap a tunnel the predecessor run
**does not load the base ruleset**: the machine's own firewall already filters; the mesh opens its **does not load the base ruleset**: the machine's own firewall already filters; the mesh opens its
foundation's ports through it and keeps the store from outside with a table of its own that only foundation's ports through it and keeps the store from outside with a table of its own that only
refuses ([08-connectivity](08-connectivity.md)). **A converged genesis refuses a machine in use** — refuses ([08-connectivity](08-connectivity.md)). **A converged genesis refuses a machine in use** —
a container running, or a port listening on an address other than loopback that is not ssh's — a container running, or a port listening on an address other than loopback that is neither ssh's
and names every one it counted, so a forgotten flag cannot close a working machine. *How it is checked:* the adoption bed raises genesis converged on a machine in use and nor held by one of the operating system's own network daemons
([ADR 0101](../../02-DECISIONS/0101-a-machines-own-resolver-does-not-make-it-in-use.md)) — and
names every one it counted, so a forgotten flag cannot close a working machine. *How it is checked:* the adoption bed raises genesis converged on a machine in use and
asserts the refusal, then adopted with the registry's port held and asserts the refusal names its asserts the refusal, then adopted with the registry's port held and asserts the refusal names its
holder, then with another port given asserts the foundation comes up, stays on that port once holder, then with another port given asserts the foundation comes up, stays on that port once
adopted as modules, and the machine's service is still reachable. adopted as modules, and the machine's service is still reachable.