novox/hq
3
0
Fork 0
Code Issues 5 Pull Requests 4 Releases Wiki Activity

Designs 07 and 21 and issue 071: genesis now makes the root secrets

Browse Source 
The installer half of the amended ADR 0085 is built and proven by the
genesis bed's root-secrets step; the foundation design closes its open item
and the installation design says what the installer does and what it still
cannot check.
This commit is contained in:
jschoubben
2026-09-21 00:50:56 +02:00
parent 8607d21110
commit 1bce3f33a8
3 changed files with 25 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
03-DESIGN/01-to-be/07-the-foundation.md
+8 -7
View File
@@ -8,7 +8,7 @@ code:
- mesh-catalog modules/postgres
- mesh-catalog modules/lavinmq
- mesh-lab test/integration/mesh.test.ts (a bare machine becomes a mesh)
updated: 2026-09-17
updated: 2026-09-21
decisions:
- 02-DECISIONS/0004-a-node-and-how-it-joins.md
- 02-DECISIONS/0078-the-store-and-broker-are-modules.md
@@ -246,12 +246,13 @@ host's vocabulary grows by one shape rather than by one resource type per founda
the module that provides one.
- **Whether one host can raise all three.** The claim under stage 2 of
[the node host](05-the-node-host.md), never proved. If it is false, the tier boundary moves.
- **The vault as the fourth piece.** [ADR 0085](../../02-DECISIONS/0085-a-secret-is-a-provision.md),
amended, makes the vault a foundation module: genesis makes the operator key before anything
is minted, replaces the fixed credentials the store and broker are raised with, and installs
`mesh-vault` beside the adopted store and broker ([24](24-the-secrets-vault.md)). The controller's
half exists; the installer's does not yet, and the bundle still raises the foundation with
well-known credentials ([issue 071](../../04-ISSUES/071-the-foundation-is-raised-with-fixed-credentials/00-report.md)).
- ~~**The vault as the fourth piece.**~~ **Closed 2026-09-21** by
[ADR 0085](../../02-DECISIONS/0085-a-secret-is-a-provision.md) as amended: genesis makes the
operator key before anything is minted, raises the store and broker with credentials it made
rather than the template's, adopts both as modules with those credentials, installs
`mesh-vault` beside them, and writes the operator-sealed export next to the key
([24](24-the-secrets-vault.md), [issue 071](../../04-ISSUES/071-the-foundation-is-raised-with-fixed-credentials/00-report.md)).
Proven by the one-node genesis bed's root-secrets step.
- **How the foundation is updated once a mesh exists.** Pinned by hand at bootstrap; afterwards
the controller could deliver it like anything else, and nothing says whether it does.