ADR 0158: a provider with one credential shares it with every consumer, and the vault remakes it for all at once; designs 24 and 13 carry it

2026-10-01 12:17:49 +02:00
parent d85b41ae4d
commit d29d3dfc23
4 changed files with 134 additions and 2 deletions
@@ -145,5 +145,7 @@ and the operator, and sends the machine, so the module starts again on it. A sec
 is refused with the word to write, because a credential rotated under software that never reads it
 again is the fault of issue 179 made deliberately; an applied one is refused until the staged form is
 built; an accepted one is refused as ADR 0113 says. `rotate` is a verb on the controller's seat with
-both shapes, so the console asks for either. *How it is checked:* the tests named in issue 180, and a
+both shapes, so the console asks for either. A provider that shares its one credential with every
+consumer ([ADR 0158](../../02-DECISIONS/0158-a-provider-with-one-credential-shares-it-with-every-consumer.md))
+rotates the same way, with every holder's copy remade and every holding machine sent together. *How it is checked:* the tests named in issue 180, and a
 live rotation through the console of a secret a module reads at start.