2377 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
jschoubben	043f8ecf9c	Design 47 and the glossary: a placement change is answered by the nodes it places before it merges (ADR 0559, issue 1126) ... The seed and every later placement pull request were to be checked as equal to what runs, which no composition outside the node can show; the nodes now answer a placement candidate.	2026-10-27 02:14:09 +01:00
mesh-tools	132aae8433	Merge pull request 'Design 47 says what a node composes from: placement, its config layers, and the node record (issue 1126)' (#482) from feat/1126-nodes-compose into main	2026-10-26 21:11:12 +00:00
jschoubben	28d84f31bf	Merge remote-tracking branch 'origin/main' into feat/1126-nodes-compose	2026-10-26 21:56:52 +01:00
mesh-tools	278ca42b3d	Merge pull request 'Playbooks 07 and 08: one release, one check, no try, push once after the review (ADR 0548)' (#484) from pb/one-check-per-release into main	2026-10-26 19:55:30 +00:00
jschoubben	1dab64134a	Playbooks 07 and 08: the one check is one status, mesh/check; drop the leftover try wording (review fixes)	2026-10-26 20:52:36 +01:00
jschoubben	a0e4c1fe17	Playbooks 07 and 08: one release, one check, no try, push once after the review (ADR 0548) ... Build capacity is the mesh's scarcest resource: a try before and after the review plus a check per fix round on an open pull request spent it several times per release.	2026-10-26 20:50:37 +01:00
jschoubben	7c88f297fc	Design 47: a settings-form module's values in the placement file, the vault's own, both sources' readers, the switch when placed, and the order of the delivery and the seed (issue 1126)	2026-10-26 19:45:32 +01:00
jschoubben	495d740d5f	Design 47: a placed node's want says self and names no composition; a yes names the composition allowed (issue 1126, ADR 0547 §2, §3)	2026-10-26 19:17:48 +01:00
jschoubben	df4ff3d039	Design 47: a model-access consumer placed before the vault serves licences is refused by the guard (issue 1126)	2026-10-26 19:09:16 +01:00
mesh-tools	d698942b1d	Merge pull request 'Design 47's milestone table names each issue once, and design 53 says milestones are records (issue 1781)' (#483) from feat/1781-milestone-records into main	2026-10-26 18:06:44 +00:00
jschoubben	a6cc3d2e0b	Design 47: a node never applies a stand-in, and composes nothing of its own until the vault seals its secrets to it (issue 1126)	2026-10-26 18:59:06 +01:00
jschoubben	b6572acd72	Design 47: every read a node's account gains to compose, and that a module with an own secret does not move until the vault seals it to the node (issue 1126, ADR 0555)	2026-10-26 18:49:09 +01:00
jschoubben	ebc1a84e59	Design 53 §13: the seed closes a milestone whose issues are all done, wontfix or resolved with no live fix included, as the tracker counts it (issue 1781)	2026-10-26 18:40:12 +01:00
jschoubben	5bb109e36e	Design 47: the node-record read is the composer copy's one intended grant beyond the controller's, and what a hand-back means for it (issue 1126, ADR 0555)	2026-10-26 18:33:46 +01:00
jschoubben	d948774794	Design 47: the node record rides in the node's own have key (issue 1126, ADR 0555 §3)	2026-10-26 18:30:28 +01:00
jschoubben	68f8a8c198	Design 47: the found tunnel is decided at adoption; adoption and enrolled peers are read, not written (issue 1126, ADR 0555)	2026-10-26 18:26:53 +01:00
jschoubben	b5b84fafc6	Design 47: config placement, as ADR 0348 words it (issue 1126)	2026-10-26 18:21:31 +01:00
jschoubben	0488bc1801	Design 47 says what a node composes from: placement with the node's decided facts and settings layers, and the node's own record (issue 1126, ADR 0549, ADR 0555)	2026-10-26 18:20:51 +01:00
jschoubben	973182cdf9	Design 53: milestones are records of the tracker, an issue's milestone is its own link, and the seed reads the design's table once (ADR 0493, issue 1781)	2026-10-26 18:00:18 +01:00
jschoubben	97d600650a	Design 47: each issue in one milestone row, R4a's range written out, and row M1 for the milestone records, so the tracker's seed takes the table without a guess (issue 1781)	2026-10-26 18:00:18 +01:00
mesh-tools	515c405c89	Merge pull request 'Design 47 names the controller-exit milestones as rows; the glossary and playbook 07 name progress (issue 1947)' (#481) from feat/1947-progress into main	2026-10-26 16:42:26 +00:00
jschoubben	a6e27687db	Design 47: 1945 is L1's issue alone, and milestone 3 names 774 with 1126's rest carried by its note (issue 1947, review round 1) ... An issue belongs to one milestone (ADR 0493 §2); R6 is delivered and named 1945 for parts L1 now carries.	2026-10-26 17:03:14 +01:00
jschoubben	b7dabd8ceb	Design 47 gives its running milestones rows; the glossary and playbook 07 name progress (issue 1947) ... The three milestones of the controller leaving build and delivery were prose only, so no reader of the table saw the running work; 1209 and 971 were listed in two milestones against ADR 0493 §2.	2026-10-26 16:40:12 +01:00
mesh-tools	3a5c4c7c4d	Merge pull request 'Designs 47, 24 and 39 and the glossary follow ADR 0548, 0549, 0550, 0551 and ADR 0547's answers' (#480) from amend/0548-0551 into main	2026-10-26 12:34:59 +00:00
jschoubben	250c3ff605	Design 24: the pointer to 'Every secret lives in the vault' says above	2026-10-26 13:33:23 +01:00
jschoubben	a3f6e967c0	Design 24: the controller hands the vault only the covered accounts' values until the third milestone, and the break-glass recovery is below (review of ADR 0550's amendment)	2026-10-26 13:32:37 +01:00
jschoubben	11b0a450c3	Designs 47, 24 and 39 follow ADR 0548 to 0551: one check per set of heads with carried verdicts and merge turns, placement in the catalogue, every secret in the vault ... Design 47 names ADR 0548 (a check runs to its end, a trunk move carries a verdict by its package digests, the hold and the merge turn), ADR 0551 (the hold and turns only while the check gates merges), ADR 0549 (placement files read by the indexer) and ADR 0550 (the vault signs and adopts the loaded hashes), and ADR 0547's answers on placement and signing. Design 24 gains every secret in the vault; design 39 moves grants and tokens into it. The glossary gains carried verdict, merge turn and placement file.	2026-10-26 13:29:30 +01:00
mesh-tools	122cda84b3	Merge pull request 'Playbooks 07 and 08: read the forge branch's head before trusting an agent's push' (#479) from pb/read-the-pushed-head into main	2026-10-26 10:03:59 +00:00
jschoubben	be1bbe0a65	Playbooks 07 and 08: read the forge head before trusting a reported push, so a try never runs on a push that did not happen	2026-10-26 11:02:44 +01:00
mesh-tools	585551722a	Merge pull request 'Design 47 follows ADR 0547: node agents compose, the grants part composes who may say what, the bus node writes the user list, and the controller leaves build and delivery in three milestones (issue 1945)' (#478) from fix/1945-user-list-follows-r into main	2026-10-26 07:51:14 +00:00
jschoubben	f1c50d3e01	Design 47: the assigner's acceptance test names its six rules, as ADR 0547 §4 leaves them; the bus node follows the controller's list until the third milestone, for hand-back; placement stays where it is for now (issue 1126)	2026-10-26 02:59:58 +01:00
jschoubben	d70791ddee	Design 47: sentences that still named the controller as composer, issuer or reader of grants follow ADR 0547 as amended	2026-10-26 02:58:12 +01:00
jschoubben	5bdeb8db83	Design 47: take-over's test as ADR 0547's insight states it	2026-10-26 02:57:45 +01:00
jschoubben	d94f8a05a8	Design 47 follows ADR 0547: node agents compose their own modules, a grants part composes who may say what, the bus node writes the user list alone, and the controller leaves build and delivery in three milestones	2026-10-26 02:57:45 +01:00
mesh-tools	fd0d712f7d	Merge pull request 'Design 47 and the as-is delivery after release 6: acceptance tests on wants, as-is 04 and 13 as the mesh runs now (issue 1130)' (#477) from fix/1130-after-r6 into main	2026-10-26 00:39:21 +00:00
jschoubben	de4c69d476	Name no node in design 47's test 10 proof: hq is public (issue 1130, review round 2)	2026-10-26 01:28:32 +01:00
jschoubben	9eb963d5f1	Give each restated acceptance test of design 47 its own proof, and add puts, the hand path and the builds bucket to as-is 04 (issue 1130, review round 1) ... Tests 18 and 19 do not cover tests 3, 7, 9, 10 and 11 as restated, so each now names the test or live read that proves it, or says it is not yet proved.	2026-10-26 01:27:21 +01:00
jschoubben	c255fd071c	Describe delivery after release 6: as-is 04 and 13 follow wants, compositions and haves, design 47's acceptance tests restated (issue 1130) ... Release 6 is delivered, so the as-is designs still describing the controller's plans were wrong, and design 47's tests 1 to 12 named batches, plans and the merge window that no longer exist.	2026-10-26 01:21:42 +01:00
mesh-tools	b11120f681	Merge pull request 'Playbooks 07 and 08: lessons from the 2026-10-25 recovery' (#476) from pb/recovery-lessons-2026-10-25 into main	2026-10-25 12:30:43 +00:00
jschoubben	0354947ba6	Playbooks 07 and 08: the dependent-pull-request rule leaves delivery group members out; the instance-search rule is a numbered item	2026-10-25 13:29:17 +01:00
jschoubben	4d596bd211	Playbooks 07 and 08: open a dependent pull request only after delivery, fold a follow-up into the unapproved one, search every instance of a fault kind	2026-10-25 13:27:54 +01:00
mesh-tools	0e1d0392bc	Merge pull request 'R6: design 47, the glossary and playbook 07 follow the switch to wants (issue 1130)' (#475) from feat/r6 into main	2026-10-24 23:00:22 +00:00
jschoubben	ba09497092	Name the hand-path command mesh-hand-compose, as mesh-sdk feat/r6 now calls it: main's mesh-compose is the composer (ADR 0482, issue 1943)	2026-10-24 23:06:00 +02:00
jschoubben	2d3a205740	Merge remote-tracking branch 'origin/main' into feat/r6	2026-10-24 23:00:09 +02:00
jschoubben	49dd8fc7e3	Merge pull request 'R4g finish: hq's checks as Go tests, the old word struck, the marker (issues 1296, 1935)' (#473) from feat/r4g-finish into main ... Reviewed-on: #473	2026-10-24 20:56:42 +00:00
jschoubben	9558b71a4a	Merge pull request 'Playbook 07: read a verdict's trunk against main at once, because a lagging source revision makes the Approve merge nothing (issue 1726)' (#474) from pb/verdict-trunk into main ... Reviewed-on: #474	2026-10-24 19:47:56 +00:00
jschoubben	3dbb5d4e65	Design 47: the switch needs release 5's bus grants and the operator's key first, the record hold's exception after the switch, and nothing checks the budgets (review of 4b514e4, issue 1130)	2026-10-24 21:06:41 +02:00
jschoubben	4b514e4d69	Design 47, the glossary and playbooks 04, 07 and 08 for release 6: wants and signed compositions, no plans (ADR 0539, issue 1130) ... Release 6 deletes delivery plans, batches, the merge window and tiers, so design 47's sections that described them as current are rewritten to the assigner's seven rules, the controller's signed compositions per node, the node agent, credentials on a done build, the switch as release 5's last plan, the hand path by mesh-compose and a want, and the view's delivered, moving, settled and stuck events. The glossary gains composition and restates want, declaration, send and apply; the playbooks follow a delivery by the view and the have keys and call no plans, plan, push or what-if.	2026-10-24 21:01:24 +02:00
jschoubben	8433e42c03	Playbook 07: the glossary's words, the source revision and the gate (review)	2026-10-24 13:54:31 +02:00
jschoubben	129af9906d	Playbook 07: read a verdict's trunk against main at once, because a lagging trunk makes the Approve merge nothing (issue 1726)	2026-10-24 13:50:37 +02:00