Cite decisions by number now that they live in the knowledge base, and date the design today
mesh/merge-gate head 3c5edc387955 merged into trunk 35d5b2814f09 — pass: the change touches no module of the mesh's graph
mesh/repo-check head 3c5edc387955 merged into trunk 35d5b2814f09 — pass: its merge-check.sh passed
mesh/delivery delivered

This commit is contained in:
2026-10-14 23:12:18 +02:00
parent ab5025d508
commit 3c5edc3879
+4 -4
View File
@@ -1134,12 +1134,12 @@ resolving to an address nothing can reach.
| Layer | What it carries | Where the mesh acts there |
|---|---|---|
| 7 Application | the message itself | the bus ([ADR 0106](../../02-DECISIONS/0106-the-bus-is-nats.md)); resolution (§2); exposure, where the proxy chooses a route by the name a request asks for (§3) |
| 7 Application | the message itself | the bus (ADR 0106); resolution (§2); exposure, where the proxy chooses a route by the name a request asks for (§3) |
| 6 Presentation | how what is said is encoded and encrypted | certificates (§5): TLS, which is usually drawn between 4 and 7 and placed here by the book |
| 5 Session | a conversation kept open | a node's link to the bus, opened once and reopened after the machine sleeps |
| 4 Transport | ports, TCP and UDP | filtering (§4), which opens a port to a source; the private network itself travels as UDP |
| 3 Network | addresses and the path between them | the private network (§1): every node's address, the peer graph, the hub relaying |
| 2 Data link | frames on one network segment | the machine's own uplink ([ADR 0117](../../02-DECISIONS/0117-a-machines-uplink-is-a-seat.md)), on the underlay |
| 2 Data link | frames on one network segment | the machine's own uplink (ADR 0117), on the underlay |
| 1 Physical | cable, fibre, radio | nothing of the mesh's |
### Two networks, one inside the other
@@ -1180,7 +1180,7 @@ through the hub only. In a small mesh one node is both the anchor and the hub, a
**Every arrow points at the hub.** A node with no public address still has a tunnel, because it dials
out and the hub answers; only the hub's tunnel must be dialable, at a stable address
([ADR 0169](../../02-DECISIONS/0169-a-machine-joins-through-the-tunnel-and-the-bus-is-never-public.md)).
(ADR 0169).
### One tool call, from the laptop to a home-server
@@ -1216,7 +1216,7 @@ therefore has exactly one route, the hub's.
### Reading a failure by layer
The machine's own network checks
([ADR 0241](../../02-DECISIONS/0241-a-machine-says-how-its-network-is-and-an-outside-writer-of-a-mesh-file-is-a-finding.md))
(ADR 0241)
each look at one layer:
| Check | Layer | Failing alone means |