2363 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
jschoubben	b6572acd72	Design 47: every read a node's account gains to compose, and that a module with an own secret does not move until the vault seals it to the node (issue 1126, ADR 0555)	2026-10-26 18:49:09 +01:00
jschoubben	5bb109e36e	Design 47: the node-record read is the composer copy's one intended grant beyond the controller's, and what a hand-back means for it (issue 1126, ADR 0555)	2026-10-26 18:33:46 +01:00
jschoubben	d948774794	Design 47: the node record rides in the node's own have key (issue 1126, ADR 0555 §3)	2026-10-26 18:30:28 +01:00
jschoubben	68f8a8c198	Design 47: the found tunnel is decided at adoption; adoption and enrolled peers are read, not written (issue 1126, ADR 0555)	2026-10-26 18:26:53 +01:00
jschoubben	b5b84fafc6	Design 47: config placement, as ADR 0348 words it (issue 1126)	2026-10-26 18:21:31 +01:00
jschoubben	0488bc1801	Design 47 says what a node composes from: placement with the node's decided facts and settings layers, and the node's own record (issue 1126, ADR 0549, ADR 0555)	2026-10-26 18:20:51 +01:00
mesh-tools	515c405c89	Merge pull request 'Design 47 names the controller-exit milestones as rows; the glossary and playbook 07 name progress (issue 1947)' (#481) from feat/1947-progress into main	2026-10-26 16:42:26 +00:00
jschoubben	a6e27687db	Design 47: 1945 is L1's issue alone, and milestone 3 names 774 with 1126's rest carried by its note (issue 1947, review round 1) ... An issue belongs to one milestone (ADR 0493 §2); R6 is delivered and named 1945 for parts L1 now carries.	2026-10-26 17:03:14 +01:00
jschoubben	b7dabd8ceb	Design 47 gives its running milestones rows; the glossary and playbook 07 name progress (issue 1947) ... The three milestones of the controller leaving build and delivery were prose only, so no reader of the table saw the running work; 1209 and 971 were listed in two milestones against ADR 0493 §2.	2026-10-26 16:40:12 +01:00
mesh-tools	3a5c4c7c4d	Merge pull request 'Designs 47, 24 and 39 and the glossary follow ADR 0548, 0549, 0550, 0551 and ADR 0547's answers' (#480) from amend/0548-0551 into main	2026-10-26 12:34:59 +00:00
jschoubben	250c3ff605	Design 24: the pointer to 'Every secret lives in the vault' says above	2026-10-26 13:33:23 +01:00
jschoubben	a3f6e967c0	Design 24: the controller hands the vault only the covered accounts' values until the third milestone, and the break-glass recovery is below (review of ADR 0550's amendment)	2026-10-26 13:32:37 +01:00
jschoubben	11b0a450c3	Designs 47, 24 and 39 follow ADR 0548 to 0551: one check per set of heads with carried verdicts and merge turns, placement in the catalogue, every secret in the vault ... Design 47 names ADR 0548 (a check runs to its end, a trunk move carries a verdict by its package digests, the hold and the merge turn), ADR 0551 (the hold and turns only while the check gates merges), ADR 0549 (placement files read by the indexer) and ADR 0550 (the vault signs and adopts the loaded hashes), and ADR 0547's answers on placement and signing. Design 24 gains every secret in the vault; design 39 moves grants and tokens into it. The glossary gains carried verdict, merge turn and placement file.	2026-10-26 13:29:30 +01:00
mesh-tools	122cda84b3	Merge pull request 'Playbooks 07 and 08: read the forge branch's head before trusting an agent's push' (#479) from pb/read-the-pushed-head into main	2026-10-26 10:03:59 +00:00
jschoubben	be1bbe0a65	Playbooks 07 and 08: read the forge head before trusting a reported push, so a try never runs on a push that did not happen	2026-10-26 11:02:44 +01:00
mesh-tools	585551722a	Merge pull request 'Design 47 follows ADR 0547: node agents compose, the grants part composes who may say what, the bus node writes the user list, and the controller leaves build and delivery in three milestones (issue 1945)' (#478) from fix/1945-user-list-follows-r into main	2026-10-26 07:51:14 +00:00
jschoubben	f1c50d3e01	Design 47: the assigner's acceptance test names its six rules, as ADR 0547 §4 leaves them; the bus node follows the controller's list until the third milestone, for hand-back; placement stays where it is for now (issue 1126)	2026-10-26 02:59:58 +01:00
jschoubben	d70791ddee	Design 47: sentences that still named the controller as composer, issuer or reader of grants follow ADR 0547 as amended	2026-10-26 02:58:12 +01:00
jschoubben	5bdeb8db83	Design 47: take-over's test as ADR 0547's insight states it	2026-10-26 02:57:45 +01:00
jschoubben	d94f8a05a8	Design 47 follows ADR 0547: node agents compose their own modules, a grants part composes who may say what, the bus node writes the user list alone, and the controller leaves build and delivery in three milestones	2026-10-26 02:57:45 +01:00
mesh-tools	fd0d712f7d	Merge pull request 'Design 47 and the as-is delivery after release 6: acceptance tests on wants, as-is 04 and 13 as the mesh runs now (issue 1130)' (#477) from fix/1130-after-r6 into main	2026-10-26 00:39:21 +00:00
jschoubben	de4c69d476	Name no node in design 47's test 10 proof: hq is public (issue 1130, review round 2)	2026-10-26 01:28:32 +01:00
jschoubben	9eb963d5f1	Give each restated acceptance test of design 47 its own proof, and add puts, the hand path and the builds bucket to as-is 04 (issue 1130, review round 1) ... Tests 18 and 19 do not cover tests 3, 7, 9, 10 and 11 as restated, so each now names the test or live read that proves it, or says it is not yet proved.	2026-10-26 01:27:21 +01:00
jschoubben	c255fd071c	Describe delivery after release 6: as-is 04 and 13 follow wants, compositions and haves, design 47's acceptance tests restated (issue 1130) ... Release 6 is delivered, so the as-is designs still describing the controller's plans were wrong, and design 47's tests 1 to 12 named batches, plans and the merge window that no longer exist.	2026-10-26 01:21:42 +01:00
mesh-tools	b11120f681	Merge pull request 'Playbooks 07 and 08: lessons from the 2026-10-25 recovery' (#476) from pb/recovery-lessons-2026-10-25 into main	2026-10-25 12:30:43 +00:00
jschoubben	0354947ba6	Playbooks 07 and 08: the dependent-pull-request rule leaves delivery group members out; the instance-search rule is a numbered item	2026-10-25 13:29:17 +01:00
jschoubben	4d596bd211	Playbooks 07 and 08: open a dependent pull request only after delivery, fold a follow-up into the unapproved one, search every instance of a fault kind	2026-10-25 13:27:54 +01:00
mesh-tools	0e1d0392bc	Merge pull request 'R6: design 47, the glossary and playbook 07 follow the switch to wants (issue 1130)' (#475) from feat/r6 into main	2026-10-24 23:00:22 +00:00
jschoubben	ba09497092	Name the hand-path command mesh-hand-compose, as mesh-sdk feat/r6 now calls it: main's mesh-compose is the composer (ADR 0482, issue 1943)	2026-10-24 23:06:00 +02:00
jschoubben	2d3a205740	Merge remote-tracking branch 'origin/main' into feat/r6	2026-10-24 23:00:09 +02:00
jschoubben	49dd8fc7e3	Merge pull request 'R4g finish: hq's checks as Go tests, the old word struck, the marker (issues 1296, 1935)' (#473) from feat/r4g-finish into main ... Reviewed-on: #473	2026-10-24 20:56:42 +00:00
jschoubben	9558b71a4a	Merge pull request 'Playbook 07: read a verdict's trunk against main at once, because a lagging source revision makes the Approve merge nothing (issue 1726)' (#474) from pb/verdict-trunk into main ... Reviewed-on: #474	2026-10-24 19:47:56 +00:00
jschoubben	3dbb5d4e65	Design 47: the switch needs release 5's bus grants and the operator's key first, the record hold's exception after the switch, and nothing checks the budgets (review of 4b514e4, issue 1130)	2026-10-24 21:06:41 +02:00
jschoubben	4b514e4d69	Design 47, the glossary and playbooks 04, 07 and 08 for release 6: wants and signed compositions, no plans (ADR 0539, issue 1130) ... Release 6 deletes delivery plans, batches, the merge window and tiers, so design 47's sections that described them as current are rewritten to the assigner's seven rules, the controller's signed compositions per node, the node agent, credentials on a done build, the switch as release 5's last plan, the hand path by mesh-compose and a want, and the view's delivered, moving, settled and stuck events. The glossary gains composition and restates want, declaration, send and apply; the playbooks follow a delivery by the view and the have keys and call no plans, plan, push or what-if.	2026-10-24 21:01:24 +02:00
jschoubben	8433e42c03	Playbook 07: the glossary's words, the source revision and the gate (review)	2026-10-24 13:54:31 +02:00
jschoubben	129af9906d	Playbook 07: read a verdict's trunk against main at once, because a lagging trunk makes the Approve merge nothing (issue 1726)	2026-10-24 13:50:37 +02:00
jschoubben	2249d30151	Merge main into feat/r4g-finish (#472)	2026-10-24 13:26:24 +02:00
jschoubben	c12d503b2e	Merge pull request 'Playbooks 07 and 08: ask who ends each bus key, how a switch-over goes one node first, how a group's integration level runs; a hand merge runs it first (research 071, issue 1941)' (#472) from pb/research-071-checks into main ... Reviewed-on: #472	2026-10-24 11:10:51 +00:00
jschoubben	8498006d23	Playbooks 07 and 08: answer the review (no lab, plain words, checks on the forge, issue 1941)	2026-10-24 12:50:35 +02:00
jschoubben	d20ed892cf	Playbooks 07 and 08: three questions in the milestone file, and a try before a merge by hand (research 071, issue 1921)	2026-10-24 12:45:57 +02:00
jschoubben	d08cac4e86	Answer the review of hq's finish: role names in the as-is delivery, ADR 0524-0529 named, stale check names fixed (issue 1296)	2026-10-24 04:40:02 +02:00
jschoubben	ca460b681b	hq's checks read the whole repository: mark the package reads-outside so its tests always run (issue 1935)	2026-10-24 03:46:56 +02:00
jschoubben	b3b778a1a6	Describe delivery as it runs after R4g: the parts, the build modules, the one check (issue 1296, H9)	2026-10-24 03:41:01 +02:00
jschoubben	6dc008b5e7	Delete merge-check.sh and the four Python checks; the Go tests replace them (issue 1296, H6)	2026-10-24 03:39:11 +02:00
jschoubben	82aa3f6afa	Merge pull request 'Playbooks 07 and 08: after a failed try, a local run of the integration level is a good first step (guideline)' (#471) from pb/try-fails-run-locally into main ... Reviewed-on: #471	2026-10-23 21:50:24 +00:00
jschoubben	8055006ba1	Playbook 07: the two 'never run integration tests on the machine' lines say 'while developing', so the guideline after a failed try no longer contradicts them (review-471)	2026-10-23 23:24:15 +02:00
jschoubben	2b53b6a5d2	Playbooks 07 and 08: say the local run after a failed try as a guideline, not a rule (the operator)	2026-10-23 23:22:21 +02:00
jschoubben	87c338da8e	Playbooks 07 and 08: a failed try or check is run locally at once, so every failure shows in one run, not one per try (the operator, 2026-10-23)	2026-10-23 23:20:27 +02:00
jschoubben	656f3af86f	Merge pull request 'R4g+R5 (hq): its checks as Go tests; design 47, the glossary and playbooks say what R4g builds (design 47)' (#470) from feat/r4g into main ... Reviewed-on: #470	2026-10-23 17:54:31 +00:00
jschoubben	e8bd9171cd	Design 47: the gate reads mesh/check, the forge requires no status (ADR 0534 §1 changes ADR 0447 §5)	2026-10-23 16:31:15 +02:00