novox/hq
6
0
Fork 0
Code Issues Pull Requests 2 Releases Wiki Activity

ADR 0206: a node reports the grant it holds; the manager adopts a licence by refreshing it

Browse Source 
The operator's flow: clients publish what their credentials file holds, the
manager takes in a licence it does not own and rotates it from then on. The
token itself cannot be published (design 32 §10, ADR 0201), so a node reports
fingerprints and identity as state and hands the grant over only when the
manager asks; adopting is refreshing, newest login first; bindings with a
generation replace the rotated/switched events. Designs 36 and 39 and to-be 40
amended; a pointer note on ADR 0183.
This commit is contained in:
jochen
2026-10-04 11:58:46 +02:00
parent f6668d76d6
commit 82fa5f79ea
6 changed files with 243 additions and 64 deletions
Download Patch File Download Diff File Expand all files Collapse all files
02-DECISIONS/README.md
+1
View File
@@ -304,6 +304,7 @@ python3 00-META/checks/index.py fail if stale
- **0203** — [The account's environment is one module's, and every module contributes to it](0203-the-accounts-environment-is-one-modules-and-every-module-contributes-to-it.md)
- **0204** — [A module contributes shell code to the login shell in named slots, and the login shell is the mesh's seat](0204-a-module-contributes-shell-code-to-the-login-shell-in-named-slots.md)
- **0205** — [Software the distribution does not package ships as a pinned archive of the module's own](0205-software-the-distribution-does-not-package-ships-as-a-pinned-archive-of-the-module.md)
- **0206** — [A node reports the Anthropic grant it holds; the licence manager adopts a licence by refreshing it, and what each node should hold is the manager's state](0206-a-node-reports-the-anthropic-grant-it-holds-and-the-licence-manager-adopts-a-licence-by-refreshing-it.md)
### How it is built