jschoubben
0d9208dbbf
ADR 0172: the lab is a module, and runs a bed when the mesh asks
2026-10-02 14:15:44 +02:00
mesh-admin
bf0ee7cb25
Merge pull request 'ADR 0169: the firewall seat serves its verbs, and a foreign rule set is removed through one of them' ( #285 ) from feat/the-firewall-seat-serves-its-verbs into main
2026-10-02 11:29:15 +00:00
jschoubben
4567e13071
ADR 0169: the firewall seat serves its verbs, and a foreign rule set is removed through one of them
...
Designs 33 and 08 revised. The first node-scoped seat with verbs: rules,
reload, remove; the nftables module holds it from a runtime with NET_ADMIN,
the first container to declare a capability.
2026-10-02 13:27:03 +02:00
mesh-admin
aa5d9f1045
Merge pull request 'ADR 0169 (proposed): a machine joins through the tunnel, and the bus is never public' ( #284 ) from jschoubben/a-machine-joins-through-the-tunnel into main
2026-10-02 11:17:42 +00:00
jschoubben
79642251a1
ADR 0169 accepted; design 08's join order starts with the tunnel
2026-10-02 13:17:32 +02:00
jschoubben
331cb94c6e
ADR 0169 (proposed): a machine joins through the tunnel, and the bus is never public
...
The bus was public only so a new machine could enrol before it had a
tunnel. The machine now makes its tunnel key first, the token is issued
for it and makes it a peer of the hub, and enrolment happens over the
tunnel.
2026-10-02 13:13:15 +02:00
mesh-admin
78351560f7
Merge pull request 'Issue 198: the home network's DNS server ran outside the mesh, and its filter closed it' ( #283 ) from jschoubben/the-lans-dns-is-the-mesh into main
2026-10-02 10:22:51 +00:00
mesh-admin
62cc2f89c7
Merge pull request 'Issue 197: a physical link that is down is not filtered when it comes up' ( #280 ) from jschoubben/every-physical-link-faces-outside into main
2026-10-02 10:22:40 +00:00
jschoubben
426f741ad0
Issue 198: the home network's DNS server ran outside the mesh, and its filter closed it
2026-10-02 12:22:31 +02:00
jschoubben
9bed54d3be
Issue 197 resolved: the wired port is guarded before it is plugged in
2026-10-02 12:22:15 +02:00
jschoubben
413daf8ad5
Issue 197: a physical link that is down is not filtered when it comes up
2026-10-02 12:22:15 +02:00
mesh-admin
5c993c09b7
Merge pull request 'Issues 143 and 144 resolved: the live row of ADR 0168 read on the home server and the control node' ( #282 ) from issues/143-144-resolved into main
2026-10-02 10:11:37 +00:00
jschoubben
7c3be48db2
Issues 143 and 144 resolved: the live row of ADR 0168 read on the home server and the control node
2026-10-02 12:11:17 +02:00
mesh-admin
b665d06701
Merge pull request 'ADR 0168: a converged machine is filtered by the mesh alone, and the host says what else refuses (group 7)' ( #281 ) from feat/one-thing-filters-a-converged-machine into main
2026-10-02 10:03:48 +00:00
jschoubben
1bd13446d4
ADR 0168: a converged machine is filtered by the mesh alone, and the host says what else refuses (group 7)
...
Designs 08 and 05 revised; 141 resolved by ADR 0140 and 084 by ADR 0102 and
issue 128, both by reading; 143 and 144 decided, built on the matching
branches in mesh-host and mesh-controller, resolved when the home server's
record names the predecessor's chain.
2026-10-02 11:58:18 +02:00
mesh-admin
14adaafa53
Merge pull request 'to-be 29: the account fact and home-scoped resources shipped; the ssh-client module, CA and ~/.ssh boundary did not' ( #279 ) from design/29-what-shipped into main
2026-10-02 09:49:52 +00:00
mesh-admin
bd673cc6ec
Merge pull request 'Group 6 closed: 086, 090, 098, 099, 100, 101 resolved on the operator's decision' ( #278 ) from issues/group-6-closed into main
2026-10-02 09:38:11 +00:00
jschoubben
bd6c55d225
Group 6 closed: 086, 090, 098, 099, 100, 101 resolved on the operator's decision, each saying the live row was not run
2026-10-02 11:37:08 +02:00
mesh-admin
2bbbc56502
Merge pull request 'Issue 194 resolved: the fixed host forgot its former archive on all four machines' ( #277 ) from issue/194-resolved into main
2026-10-02 09:31:49 +00:00
jschoubben
c8935aceca
Issue 194 resolved: the fixed host forgot its former archive on all four machines
2026-10-02 11:31:29 +02:00
mesh-admin
29b656f2c0
Merge pull request 'Issue 196: the hub relays the mesh only on the ports it publishes itself' ( #276 ) from jschoubben/the-hub-relays-the-mesh into main
2026-10-02 09:23:55 +00:00
jschoubben
d05ac367f1
Issue 196 resolved: the hub relays the mesh, re-swept live
2026-10-02 11:23:37 +02:00
jschoubben
1c0dafb918
Issue 196: the hub relays the mesh only on the ports it publishes itself
2026-10-02 11:17:11 +02:00
mesh-admin
018ee359ae
Merge pull request 'Issue 194: the host's own former archive stops every machine applying anything' ( #274 ) from issue/194-the-hosts-own-former-archive-stops-every-apply into main
2026-10-02 09:04:30 +00:00
mesh-admin
c5535eeebd
Merge pull request 'ADR 0163 built: the take digest, the minted-secret refusal, the networks setting, settings judged where stored, genesis raising the forge as declared' ( #270 ) from feat/a-take-is-a-comparison-the-rest into main
2026-10-02 09:04:21 +00:00
mesh-admin
dbb9d2bc16
Merge pull request 'Issue 191 and ADR 0167: a membership carries what its module receives, and who the mesh is' ( #273 ) from jschoubben/an-internal-only-route into main
2026-10-02 07:49:27 +00:00
jschoubben
28d53dcc28
Issue 191 resolved: internal-only routes are served to the mesh, live on both proxies
2026-10-02 09:49:25 +02:00
jschoubben
df667eb710
ADR 0167: a membership carries what its module receives, and who the mesh is
...
Issue 191's route proxy needs to know who the mesh is to serve an
internal name correctly, and the first fix had it work that out alone.
The membership on the bus now carries it, from the same list the filter
uses. ADR 0138 gains an insight that the proxy is where internal reach
is kept; designs 08 and 25 say how.
2026-10-02 09:49:19 +02:00
jschoubben
098a2ca485
Issue 191: a route with only an internal name is dropped as naming nothing
2026-10-02 09:49:19 +02:00
mesh-admin
a34cedeb5d
Merge pull request 'Issue 195: every assigned module is counted as a bus user without a credential' ( #275 ) from jschoubben/issue-195 into main
2026-10-02 00:44:29 +00:00
jschoubben
db5ff5a5ee
Issue 195: every assigned module is counted as a bus user without a credential
...
The status warning names 49 users; 48 are modules that never speak on the
bus, and the one real fault, a declared broker secret filled with a
generated value, looked the same as the rest.
2026-10-02 02:44:24 +02:00
jschoubben
780c2b6e58
Issue 194: the host's own former archive stops every machine applying anything
...
Rule 5 of ADR 0163 (a former target is removed) met issue 162 (an archive
has no removal) in the host's own archive, the first time a host carrying
former targets replaced itself; every machine applied nothing from then on.
2026-10-02 02:42:19 +02:00
jschoubben
c4151e6bc4
ADR 0163 built: the take digest, the minted-secret refusal, the networks setting, settings judged where stored, genesis raising the forge as declared; issues 096, 097, 126 resolved
...
The record gets its built note; designs 05 and 09 the revisions; 086, 098,
099, 100 and 101 stay located because every machine is converged and the
record's live row — a take read on an adopted machine — has not been run;
090 is built in part, its network difference left for the take to say.
2026-10-01 23:45:57 +02:00
jochen
8c231102f8
to-be 29: the account fact and home-scoped resources shipped; the ssh-client module, CA and ~/.ssh boundary did not
...
The controller merged §1, §2 and the composed ssh config on 2026-09-27 while hq still
called the design proposed. Record what is on main, what is held on a branch, and what
has no code — and that the account fact shipped without a decision record, which is the
next thing to write. Also drop the real account and node names the public repository must
not carry, and correct ADR numbers that drifted in a renumbering.
2026-10-01 23:14:10 +02:00
mesh-admin
d8083bcf9e
Merge pull request 'Issue 189: the plan's half is built; the moved word stays for a decision' ( #269 ) from issue/189-the-plan-half into main
2026-10-01 20:28:33 +00:00
jschoubben
6f26f97fdb
Issue 189: the plan's half is built; the moved word stays for a decision
2026-10-01 22:25:31 +02:00
mesh-admin
63ed4a7c96
Merge pull request 'Issue 189: a rebuild from the same commit is not a move, so a packaging module's new image never rolls out' ( #268 ) from issue/189-a-rebuild-from-the-same-commit-is-not-a-move into main
2026-10-01 19:55:20 +00:00
jschoubben
48ca2fb41b
Issue 189: a rebuild from the same commit is not a move, so a packaging module's new image never rolls out
2026-10-01 21:54:44 +02:00
mesh-admin
3976f09738
Merge pull request 'ADR 0163: taking a module over is a comparison (group 6)' ( #266 ) from decision/0163-taking-a-module-over-is-a-comparison into main
2026-10-01 19:13:53 +00:00
jschoubben
2904c359b8
ADR 0163: taking a module over is a comparison — what it compares, refuses and carries; designs 05 and 09; group 6's issues located, 093 resolved
2026-10-01 21:12:36 +02:00
mesh-admin
b277f3b4ba
Merge pull request 'ADR 0162: built, and proven live by the first tiered plan' ( #265 ) from decision/0162-live into main
2026-10-01 19:00:53 +00:00
jschoubben
50e4d9c2a7
ADR 0162: built, and proven live by the first tiered plan
2026-10-01 21:00:10 +02:00
mesh-admin
a7d0dd83d1
Merge pull request 'Issues 184 and 188 resolved' ( #264 ) from issues/184-188-resolved into main
2026-10-01 18:54:28 +00:00
jschoubben
a2c9fbb665
Issues 184 and 188 resolved: the merge handler returns at once; a machine is resolved with its pins and a dropped one is said
2026-10-01 20:54:10 +02:00
mesh-admin
0278766dfb
Merge pull request 'Issue 188: a refusal inside "who is on the network" drops a machine silently' ( #263 ) from issue/188-a-refusal-inside-on-the-network-drops-a-machine-silently into main
2026-10-01 16:22:51 +00:00
jschoubben
606fbb7add
Issue 188: the second fault beneath the first, and its fix
2026-10-01 18:22:19 +02:00
jschoubben
a92e4bf121
Issue 188: what the live fault was and how it was resolved
2026-10-01 18:14:37 +02:00
jschoubben
187442ec7b
Issue 188: a refusal inside on-the-network drops a machine silently
2026-10-01 18:10:57 +02:00
mesh-admin
47c45d4386
Merge pull request 'ADR 0162: a merge produces a tiered plan the mesh keeps; dependencies are one relation with three kinds' ( #262 ) from decision/0162-a-merge-produces-a-tiered-plan into main
2026-10-01 15:54:23 +00:00
jschoubben
82496536cd
ADR 0162: the three kinds of dependency, where the edges come from, and the one real cycle
2026-10-01 17:53:57 +02:00
jschoubben
mesh-admin
jochen