jschoubben
6bc9df4b49
Review corrections: 076 and ADR 0098 say what the authority could and could not do; issues 077 (a fetched fact is fetched once) and 078 (secret accept takes any name) opened
2026-09-21 22:55:11 +02:00
jschoubben
6d3cb60949
Issue 076: the route-forwarding bed proves ADR 0098; what the run taught about the overlay
2026-09-21 22:44:24 +02:00
jschoubben
75af72ca27
ADR 0096: the copy is proven against the public hub by the genesis bed
2026-09-21 22:32:03 +02:00
jschoubben
252c6042e8
ADR 0098: a fact a provider makes at first start is fetched from it; issue 076 resolved; design 08 amended; 074 down to one bed
2026-09-21 22:27:32 +02:00
jschoubben
bc373797c7
Issue 076 opened: a served fact made at first start cannot be served; ADR 0097's refusal of an undeclared base is live
2026-09-21 22:16:15 +02:00
jschoubben
559683318b
Merge pull request 'Multiple fixes: issues 064, 066 and 020 resolved; 074 narrowed to two beds' ( #68 ) from multiple-fixes into main
2026-09-21 22:13:20 +02:00
jschoubben
ac11bea77f
Issue 020 resolved: the symptom was the bed's, proven against Pebble and step-ca alike
2026-09-21 22:12:51 +02:00
jschoubben
c1a10dc3f8
Issue 066 resolved: a file and its reader are guarded by a gate, proven by the coupled-pair spike; design 20 says so
2026-09-21 22:04:14 +02:00
jschoubben
e993233004
Issue 074: six of the ten beds retired rather than converted
2026-09-21 21:53:11 +02:00
jschoubben
2d77911511
Issue 064 resolved: the package half placed by the genesis run, the image half by ADR 0097
2026-09-21 21:52:32 +02:00
jschoubben
f11824d299
Merge pull request 'Multiple fixes: ADRs 0094–0097; issues 069, 049, 046 resolved; 064's image half decided' ( #67 ) from multiple-fixes into main
2026-09-21 21:05:13 +02:00
jschoubben
43ca9ce0ae
ADR 0097: an undeclared base is said, not yet refused
2026-09-21 20:48:19 +02:00
jschoubben
71072e240d
ADR 0097: a vendor image is a declared build input; issue 064's image half decided; design 18 amended
2026-09-21 20:45:36 +02:00
jschoubben
8d981e21b1
ADR 0096: an upstream image is copied between registries; issue 046 resolved; design 18 amended
2026-09-21 20:43:07 +02:00
jschoubben
39a01b7f7e
ADR 0095: the control plane is the way to ask a module; issue 049 resolved; design 19 amended
2026-09-21 20:38:23 +02:00
jschoubben
acc9824949
ADR 0094: a module may hold several secrets from one provider; issue 069 resolved; design 24 amended
2026-09-21 20:29:29 +02:00
jschoubben
a259d1292f
Merge pull request 'ADR 0093: a fixture that runs a module's runtime carries its name; 074 diagnosed; 075 resolved' ( #66 ) from feat/mesh-tests-and-runtimes into main
2026-09-21 19:36:44 +02:00
jschoubben
76cd91413e
ADR 0093: a fixture that runs a module's runtime carries its name; 074 diagnosed, two beds converted; 075 resolved
2026-09-21 19:30:35 +02:00
jschoubben
6427afe6ae
Merge pull request 'Issues 072 and 073 name their merges, the branches being gone' ( #65 ) from chore/merges-named into main
2026-09-21 19:25:06 +02:00
jschoubben
d92068be7b
Issues 072 and 073 name their merges, the branches being gone
2026-09-21 19:24:28 +02:00
jschoubben
6a35e5a58c
Merge pull request 'Multiple fixes: status vocabulary aligned, 065/026/070/007 resolved, 066/069/049/046 located, 064 diagnosed' ( #64 ) from feat/multiple-fixes into main
2026-09-21 19:23:34 +02:00
jschoubben
bf4d99843f
Merge pull request 'Issue 072 diagnosed: genesis registers the manifest its build produced; design 17 says so' ( #63 ) from feat/one-controller-manifest into main
2026-09-21 19:23:31 +02:00
jschoubben
702289ad7d
Merge pull request 'ADR 0089: a bed reads the catalogue it proves; issue 073 diagnosed; issues 074 and 075 opened' ( #62 ) from feat/beds-read-the-catalogue into main
2026-09-21 19:23:16 +02:00
jschoubben
6ee95a3f31
ADR 0090: a failure is the same by resource id, not by the host's words
2026-09-21 19:23:04 +02:00
jschoubben
159a583cf0
Issue 069: the count is the catalogue's, not the report's
2026-09-21 17:51:40 +02:00
jschoubben
62ff9a5bd3
Issues 046, 049 and 069 located, each with the decision its fix needs named
2026-09-21 17:50:42 +02:00
jschoubben
16442ecd23
ADRs 0091 and 0092; issues 026 and 070 resolved; designs 18 and 24 amended
2026-09-21 17:50:41 +02:00
jschoubben
ffb7fa52ec
Issues 007 resolved, 066 located, 064 diagnosed
2026-09-21 17:48:38 +02:00
jschoubben
fcf34727fe
ADR 0090: a failure that repeats is said to be stuck; issue 065 resolved
...
The controller kept one report per machine, replaced, so a resource nothing can
ever apply looked like a failure that had just happened, every few minutes, for
ever. It now counts identical reports and status says stuck after three.
2026-09-21 17:43:02 +02:00
jschoubben
a5e351f4cb
Nine resolved issues name where their fix landed
...
The cycle check now asks a resolved issue for its owner, and these had none.
2026-09-21 17:39:34 +02:00
jschoubben
e3279f4b5b
Issue 054 names where its fix landed
2026-09-21 17:39:09 +02:00
jschoubben
d52687d0c8
Issues 067 and 068 name where their fix landed
2026-09-21 17:38:48 +02:00
jschoubben
36d9b38a0d
An issue is open, diagnosing, located, resolved or wontfix — nothing else
...
The playbook, the README and the status skill knew five statuses; the cycle check
knew a sixth, 'fixed', and not 'wontfix'. Eleven issues sat in the sixth for weeks
with their fixes shipped, one step short of closed. They are resolved; the check
refuses the word from now on and accepts the one the playbook allows.
2026-09-21 17:38:17 +02:00
jschoubben
da6414c27c
Issue 072 diagnosed: genesis registers the manifest its build produced; design 17 says so
...
ADR 0069 had already placed the controller's manifest in its own repository, and the
raising design called the catalogue copy a thing to remove. The installer's step 3 was
handed that manifest by the build and step 9 read a second copy anyway.
2026-09-21 15:18:32 +02:00
jschoubben
5dcb9dfbf6
ADR 0089: a bed reads the catalogue it proves; issue 073 diagnosed; issues 074 and 075 opened
...
The end-to-end design held 'the run rebuilds what it tests' for binaries and images
and not for manifests. The beds' inline copies fell into three kinds; only the first
is a stale copy. The other two are named: a mesh test wearing a catalogue module's
name (074) and a stocked runtime image the run never rebuilds (075).
2026-09-21 14:35:08 +02:00
jschoubben
1c90777124
Merge pull request 'Issues 031, 035 and 054 name their merges, the branch being gone' ( #61 ) from chore/migration-blockers-merges into main
2026-09-21 13:50:06 +02:00
jschoubben
ba07b43b18
Issues 031, 035 and 054 name their merges, the branch being gone
2026-09-21 13:49:56 +02:00
jschoubben
1db93ffc64
Merge pull request 'ADRs 0087 and 0088; issues 031, 035 and 054 resolved; issue 041 surveyed; issue 073 opened' ( #60 ) from feat/migration-blockers into main
2026-09-21 13:49:09 +02:00
jschoubben
ea42b00d0a
Issue 041: mongodb names its secrets' owner; the three conversions are proven
2026-09-21 13:47:39 +02:00
jschoubben
198e4db0a3
Design 07: the base ruleset closes the hub's port until the filter module derives one
2026-09-21 13:30:26 +02:00
jschoubben
a438cbdac3
Issue 041: the declared exceptions, surveyed and partly converted
2026-09-21 12:53:14 +02:00
jschoubben
5fa35362ac
Issue 073: beds carry copies of catalogue manifests
2026-09-21 12:31:04 +02:00
jschoubben
ee67f69ef4
ADRs 0087 and 0088; issues 031, 035 and 054 resolved; designs 05, 07 and 18 amended
...
A seeded file is created once (0087); the foundation filters before anything
listens (0088); a machine becomes the last thing it was told (design 05).
Each says how it is checked.
2026-09-21 12:11:50 +02:00
jschoubben
a211aecdfa
Merge pull request 'ADR 0086 (a secret reaches a process as a file), the vault shipped, issues 041 and 072' ( #59 ) from feat/secret-not-in-environment into main
2026-09-21 11:59:21 +02:00
jschoubben
5fb8f06a91
Issue 072: the controller's manifest exists twice; decisions index regenerated for ADR 0086
2026-09-21 10:34:17 +02:00
jschoubben
ec7b6e0748
ADR 0086: a secret reaches a process as a file, and an exception is declared
...
Closes issue 041 by decision and by code on the same branch: the catalogue
engine refuses a secret in a container's env, and a secret-carrying env-file
unless the container declares its reason; the controller reads all six of
its credentials from files; design 13 states the rule and how it is checked.
2026-09-21 10:10:33 +02:00
jschoubben
7015bf58ac
The vault shipped: as-is 06 describes it, design 24 is implemented, 071 names its merges
2026-09-21 10:10:33 +02:00
jschoubben
aa9b5b99e4
Merge pull request 'The secrets vault: handoff, the amended decision, issues 069–071, and the reconciliation of open issues' ( #58 ) from feat/secrets-vault into main
2026-09-21 10:03:28 +02:00
jschoubben
61f61b5d06
Reconcile the open issues against main
...
An audit of the six code repositories found eleven open issues fixed on main
with commits and beds to show (025, 027, 033, 036, 037, 040, 045, 047, 050,
052, 053), three partly (007, 026, 035), nine not (020, 031, 041, 046, 049,
054, 064, 065, 066) and one whose fix would live outside those repos (006).
Resolved ones name their evidence; partly ones say what remains; 041 records
that the exposure has widened since it was reported.
2026-09-21 01:52:53 +02:00
jschoubben
ffd7592687
Design 24: the export says what an earlier key opens
2026-09-21 01:16:54 +02:00
jschoubben