ADR 0097: a vendor image is a declared build input; issue 064's image half decided; design 18 amended

04-ISSUES/064-a-mesh-build-cannot-fetch-a-modules-external-dependencies/01-diagnosis.md

@@ -16,5 +16,8 @@
    repositories succeed in the same Dockerfiles.
 
 **Located in:** the builder (what it tells npm and the runtime) and the catalogue (three modules
-whose Dockerfiles fetch what no manifest names). Still open: a build must be re-run to place the
-404, and a decision is needed on whether a vendor image is declared as a build input.
+whose Dockerfiles fetch what no manifest names). The image half is decided and built:
+[ADR 0097](../../02-DECISIONS/0097-a-vendor-image-is-a-declared-build-input.md) — a vendor image
+is declared under `build.on`, copied in, and a recipe fetching what is undeclared is refused. Still
+open: the package half — a build must be re-run against the mesh's proxying registry to place the
+404 — and the three recipes themselves, which now declare their images or are refused.