ADR 0100 after re-review: the bus and registry stay reachable for enrolment; the mesh guards the store in a table that only refuses; a machine in use defined; the flip refuses while a found container is held; held containers and returning to adopted spelled out

2026-09-22 16:32:37 +02:00
parent 02c40bcab4
commit f3152d827f
7 changed files with 112 additions and 74 deletions
@@ -139,8 +139,9 @@ name, that the host's store has no record of writing. On an adopted node the hos
 found for any module not yet taken: it records a found file's original content before anything
 else, and it reports the file or container as held — a report that says what it holds, so an
 adopted node never reads as converged. Once the module is taken, its resources converge like any
-other. A held file that changes while held is reported as changed by something else, not
-reverted; a held file is never removed, even when its module is unassigned. The host also
+other. What is held is never removed, even when its module is unassigned, and a held file or
+container that changes while held is reported as changed by something else, not reverted or
+restarted. The host also
 converges a new resource, the **opening** — a port made reachable through the firewall it found
 ([08-connectivity](08-connectivity.md)) — and reports which firewall it found. This is the
 companion the host's ownership rule needed: *never touch what you did not create, unless adoption
@@ -212,6 +213,11 @@ ready; the current bundle simply does not. **All of them are built:**
 | `container` | **built** | pinned by digest ([ADR 0006](../../02-DECISIONS/0006-the-substrate-and-the-control-plane.md)); identified by a label carrying a digest of the declaration that made it, because a runtime normalises what it is given and that is indistinguishable from drift |
 | `action` | **built** | bundle-only ([ADR 0005](../../02-DECISIONS/0005-the-node-host.md)); verify is mandatory and is the idempotency check as well as the read-back |

+One more shape is decided and not yet built: **`opening`**, on adopted nodes only
+([ADR 0100](../../02-DECISIONS/0100-a-node-in-use-is-adopted-before-it-is-converged.md)) — a port
+made reachable, from where, on the incoming or forwarded path, through the firewall found on the
+machine, marked as the mesh's and re-checked on every reconcile.
+
 **A service says what it must reflect, and that is declared state rather than a command.**
 `restart-on` names files whose change means the unit must be restarted — because a running service
 does not re-read its configuration, and replacing a file, finding the service already running and