From 26073f30b0dea3395d1287ad9adbd1b288ef6f52 Mon Sep 17 00:00:00 2001 From: jochen Date: Fri, 16 Oct 2026 11:14:01 +0200 Subject: [PATCH] =?UTF-8?q?Design=2041:=20node-reads=20goes=20in=20the=20d?= =?UTF-8?q?elivery=20after=20node-files=20is=20held=20on=20every=20node=20?= =?UTF-8?q?(ADR=200394=20=C2=A79)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../01-to-be/41-the-shell-and-the-accounts-environment.md | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/03-DESIGN/01-to-be/41-the-shell-and-the-accounts-environment.md b/03-DESIGN/01-to-be/41-the-shell-and-the-accounts-environment.md index aa92b0b8..5a2556ad 100644 --- a/03-DESIGN/01-to-be/41-the-shell-and-the-accounts-environment.md +++ b/03-DESIGN/01-to-be/41-the-shell-and-the-accounts-environment.md @@ -344,7 +344,8 @@ out, the control-node's value is set to `withhold` and zsh is pushed to it. Then *`mesh-sdk`, `mesh-catalog`, `mesh-controller`. ADR 0310, extending ADR 0268; tracked by issue 418.* **Replaced by WP9.** ADR 0394 supersedes ADR 0310: `node-files` takes over every read below, with the same -bounds, content rule and refusal of secret places, and `node-reads` is removed in the delivery that brings it. +bounds, content rule and refusal of secret places; once `node-files` is held on every node, the next delivery +removes `node-reads` and `mesh-reads`. ADR 0268 §5 has narrow read tools take the common reads over from `execute`, so that an approval is asked for an act and not for a read, and ADR 0286 §44 sets the approval mark on `execute` only once those reads have a tool on @@ -393,8 +394,9 @@ project folders, downloads, logs, scratch. restorable for 7 days, and is emptied after. - **A path a module owns is refused**, naming the module and its tool, unless the call says `override` with a reason; an override is recorded and said to the operator. -- **It replaces `node-reads`.** Its reads keep WP8's bounds, content rule and kernel reads; `node-reads` and - `mesh-reads` are removed in the delivery that brings it. +- **It replaces `node-reads`.** Its reads keep WP8's bounds, content rule and kernel reads. Every node is + assigned `mesh-reads`, so `node-reads` and `mesh-reads` are removed by the next delivery, once `mesh-files` + holds `node-files` on every node. - **No Approve is asked**; every act is recorded with its caller. Read and search never return the content of a known credential file or a secret place (the mesh never prints a token); copying or moving one is allowed.