From db92ca73ff4ef506e7e877e112852df50c9f82fe Mon Sep 17 00:00:00 2001 From: jochen Date: Mon, 12 Oct 2026 12:29:07 +0200 Subject: [PATCH] Record the operator's answer: Owl's pinned copy stays in the private artifact store (issue 345, ADR 0316) --- 03-DESIGN/01-to-be/56-the-mail-client-set-up-by-the-mesh.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/03-DESIGN/01-to-be/56-the-mail-client-set-up-by-the-mesh.md b/03-DESIGN/01-to-be/56-the-mail-client-set-up-by-the-mesh.md index 068769f9..802da923 100644 --- a/03-DESIGN/01-to-be/56-the-mail-client-set-up-by-the-mesh.md +++ b/03-DESIGN/01-to-be/56-the-mail-client-set-up-by-the-mesh.md @@ -67,8 +67,10 @@ Owl is an outside vendor's add-on under a proprietary licence: it may be loaded and may not be copied to anyone else. The vendor serves only its newest version, at one address. 1. The manifest pins Owl by version and the sha256 of the vendor's xpi. -2. The builder fetches it and keeps it in the artifact store, which reaches only the operator's own nodes. It is - never committed to a repository. +2. The builder fetches it once and keeps it in the mesh's private artifact store, used only on the operator's own + machines. It is never committed to a repository, and a node never fetches it from the vendor. Whether such a + private copy is within the licence's ban on copying to third parties was the operator's call, made on + 2026-10-12. 3. The node-engine places it in the installation directory. 4. The module's `policies.json` installs it through `ExtensionSettings`, as `force_installed`, from the placed file (a `file://` URL), with `updates_disabled`. Betterbird installs it into every profile, and the person