Review corrections: 076 and ADR 0098 say what the authority could and could not do; issues 077 (a fetched fact is fetched once) and 078 (secret accept takes any name) opened

2026-09-21 22:55:11 +02:00
parent 6d3cb60949
commit 6bc9df4b49
6 changed files with 93 additions and 13 deletions
@@ -564,8 +564,11 @@ The mesh mints the authority's password and nothing else of its: a root certific
 are things only the authority can make, and a served fact written in a manifest cannot carry what
 does not exist until the authority has run. So the authority serves its root at a path beside its
 ACME directory, and the proxy that requires it fetches that root over the mesh network in a
-run-once step before it starts. *How it is checked:* the route-forwarding bed installs the
-authority, the proxy and a consumer from the catalogue and asserts the routed name is served.
+run-once step before it starts. The step is run once per declaration: a root that changes
+after first start is fetched again only when the declaration changes
+([issue 077](../../04-ISSUES/077-a-fact-fetched-at-first-start-is-fetched-once/00-report.md)).
+*How it is checked:* the route-forwarding bed installs the authority, the proxy and a consumer
+from the catalogue and asserts the routed name is served.

 ### What was built