1608 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
jochen	d2fe9bc870	Accept ADR 0267: the operator's word of 2026-10-08 ... Set its status to accepted and state the notes on ADR 0162, 0238 and 0236 as decided.	2026-10-08 23:11:35 +02:00
jochen	7d3f4407a7	ADR 0267 (proposed): an artifact is rebuilt only when its build source changes ... A merge to a shared repository moved every module that read it, in a gated tier each (issue 338). The operator's rule maps a change onto the artifacts whose build source it touches and adds only modules with a build dependency on a changed artifact; sharing a repository is no dependency. Supersedes in part ADR 0162 decision 1 (the packages kind) and ADR 0238 decision 3 (whole repository and context reads); adds build source to the glossary.	2026-10-08 23:05:51 +02:00
mesh-admin	d0be529194	Merge pull request 'Issue 337: the store's reader can read the controller's signing key (critical)' (#230) from issues/337-the-stores-reader-can-read-the-controllers-signing-key into main	2026-10-08 20:16:30 +00:00
jochen	7f78016f07	Issue 337: say that only what is gone is reported revoked, and that a grant the reader passed on is taken back with CASCADE	2026-10-08 22:11:16 +02:00
jochen	b17839a7db	Issue 337 after review: say control-node, drop the store's operational settings, and match the fix's revoke-by-grantor and read-back ... Adds what the fix cannot see (definer functions and views; the name check as a backstop) and, as a follow-up, that the reader's read-only session is a default a statement can turn off, so the missing write grants are the guard.	2026-10-08 22:02:30 +02:00
mesh-admin	4955a663d3	Merge pull request 'Issue 335: a build that passed its gate was failed and put back by the first machine's later reports' (#227) from issues/335-a-passed-gate-was-failed-by-later-reports into main	2026-10-08 19:51:27 +00:00
jochen	bbbaf943e8	Issue 335: resolved by mesh-controller#165 (8170fc5) with replay R335	2026-10-08 21:49:00 +02:00
jochen	6c297214ad	Issue 337: the store's reader could read the controller's signing key and every secret the store holds ... Opened and diagnosed: pg_read_all_data on the login the store seat's query runs as. Says what the store can and cannot tell about whether the key was read, why it should be rotated once the fix is taken, and that no rotation mechanism exists yet. The fix is mesh-catalog PR 143.	2026-10-08 21:46:01 +02:00
mesh-admin	a1c85c6de5	Merge pull request 'Design 52: until it is adopted, the workstation's fstab line still mounts at boot (review follow-up)' (#229) from fix/shares-review-followups into main	2026-10-08 19:37:03 +00:00
mesh-admin	ebffbaa17e	Merge pull request 'ADR 0264 and issue 330: a message a consumer gives up on is kept until a person delivers it again or drops it' (#223) from fix/330-a-message-given-up-on-is-kept into main	2026-10-08 19:26:57 +00:00
jochen	4dd52cace6	Design 52: say the workstation's fstab line still mounts at boot until it is adopted, and can hold the boot 30 s	2026-10-08 21:14:34 +02:00
jochen	6fdaeb79ba	Issue 334 and ADR 0264: an ask a seat gave up on can only be dropped for now ... The review refused a grant over every seat's queue, and a copy published again left the original stuck in it.	2026-10-08 21:08:12 +02:00
jochen	b0986e2ae0	Issue 330: name the installer's user list among its fixes	2026-10-08 21:08:12 +02:00
jochen	d1e0e121d6	ADR 0264 and issue 330: keep what a consumer gives up on until a person acts ... Design 25 promised a dead-letter stream nothing built; a message a consumer gave up on was lost after a week, silently once its condition cleared.	2026-10-08 21:08:12 +02:00
jochen	f346efb938	Issue 335: leave fixed-by for the merge, and call the put-back refusal a guard	2026-10-08 20:49:40 +02:00
mesh-admin	4eb8be9e66	Merge pull request 'ADR 0263 (accepted), research 038, design 52: a share is a provision, a node mounts it on demand' (#221) from feat/mounts-module into main	2026-10-08 18:39:59 +00:00
jochen	b409537dbc	Issue 335: a build that passed its gate was failed and put back by the first machine's later reports ... Recorded so the gate's verdict is known to be final, and the replay R335 holds it.	2026-10-08 20:27:36 +02:00
jochen	d05c9d7ca4	Name the safe order of taking shares into use without the retired word	2026-10-08 20:22:05 +02:00
jochen	bffd0f90d0	ADR 0263 and design 52 after review: what each export promises, per-node grants, refusals, not-built checks, and a read-only-first rollout	2026-10-08 20:21:48 +02:00
mesh-admin	0811b21be1	Merge pull request 'ADR 0265 and issue 327: a verb that reads is answered on the serving controller's own connection, and every connection says what it is' (#224) from fix/327-a-verb-reads-on-the-serving-connection into main	2026-10-08 18:21:28 +00:00
jochen	0a38d9b21d	ADR 0265: a panicking verb answers, and refused logins are not a reconnect loop	2026-10-08 20:04:19 +02:00
jochen	c3a0f7a595	ADR 0265 and issue 327: answer read verbs on the serving connection and name every connection ... Hundreds of short connections an hour, all named mesh-controller, hid any client reconnecting in a loop.	2026-10-08 20:04:19 +02:00
mesh-admin	8665027873	Merge pull request 'ADR 0262: a left-out module's data is backed up as this controller reads it, and an unplaceable line is listed' (#226) from fix/0262-backup-as-read into main	2026-10-08 16:41:31 +00:00
jochen	f30b2a3ae0	ADR 0262: note how a left-out module's data is backed up, as the controller now does it ... The record said its data is still copied; the shipped follow-up backs it up as this controller reads it and lists an unplaceable line rather than failing the machine.	2026-10-08 18:38:09 +02:00
jochen	f4b79ba7c2	Design 52 says how the modules were built: the server's bucket carries each share's path, two root processes, settings default to none	2026-10-08 18:37:15 +02:00
jochen	34899385ec	Accept ADR 0263 with the operator's choices: one share per folder so backups are never exported, mesh machines only	2026-10-08 18:23:23 +02:00
mesh-admin	79bd9911e6	Merge pull request 'ADR 0262: a preference has a default in its manifest, and the operator's own value has none' (#216) from feat/setting-defaults into main	2026-10-08 16:18:53 +00:00
jochen	6a9bc3f4b3	ADR 0262: say what a left-out module loses, and how far an entry's unknown key is read ... The record claimed a left-out module kept what the machine holds for it and that an entry's unknown key was read like a top-level one; neither is true of the merged controller.	2026-10-08 17:55:38 +02:00
jochen	f09c9befdf	ADR 0262: a module with a field the controller does not know is left out and raised, never read silently ... Dropping an unknown key would run a module without something its manifest says. Also name the check by what a key is about, narrow the listing to one machine, and say how to roll back below this record.	2026-10-08 17:55:04 +02:00
jochen	de7aca4fa6	ADR 0262: one listing of every preference, and research 037 surveying the literals to convert ... The operator asked for one place that lists every module's preferences and each machine's value, and for a list of the values the catalogues hard-code that should become preferences.	2026-10-08 17:55:04 +02:00
jochen	0e5a5e2085	ADR 0262: record the lenient read of stored manifests and the marked defaults layer ... A stored manifest read strictly would fail the whole catalogue after a controller rollback, and a node called default would lose its layer. Also scope the default, retire tunable, and list the new checks.	2026-10-08 17:55:04 +02:00
jochen	417db4d837	ADR 0262: let a preference carry a default so a running module can gain a setting ... A ${setting:} nothing set failed composition, and settings refused a key no file asked for yet, so no order of changes could add a setting to a running module. A manifest may now default a preference; the operator's own value still has none.	2026-10-08 17:55:04 +02:00
mesh-admin	acc82aa5e4	Merge pull request 'Issue 332: the service manager could neither clear a failed unit nor say what wants it' (#222) from issues/332-the-service-manager-cannot-clear-or-explain-a-failed-unit into main	2026-10-08 15:52:54 +00:00
jochen	fd6c452e61	Issue 332: add unlink-dangling and the glob refusal from the review ... disable cannot remove a link whose unit file is gone, so the verb that finds it needed one that removes it.	2026-10-08 17:40:00 +02:00
jochen	3edafd78ab	Research 038, ADR 0263 and to-be 52: let the mesh own shares and mounts, so no node depends on a hand-written export or fstab line	2026-10-08 17:23:52 +02:00
jochen	c3a20baece	Issue 332: the service manager could neither clear a failed unit nor say what wants it ... A leftover user unit stayed raised on the workstation: no seat verb showed the dangling enable link that keeps asking for it, or reset its failed record, so the only step left was a shell. Lands per ADR 0246.	2026-10-08 17:21:16 +02:00
mesh-admin	9fc09fe0d5	Merge pull request 'Issue 331: resolved, the sensors condition cleared live' (#220) from issue/331-resolved into main	2026-10-08 15:17:28 +00:00
mesh-admin	c9b0e55a1f	Merge pull request 'Issue 331: fixed-by and replay R331' (#219) from issue/331-fixed-by-and-replay into main	2026-10-08 15:17:25 +00:00
jochen	7d60650ae7	Issue 331: resolve it, now the sensors condition is seen to clear on the laptop	2026-10-08 17:12:50 +02:00
jochen	a97efa99f8	Issue 331: name the pull requests that fix it and its replay R331 ... Status stays located until the sensors condition on the laptop is seen to clear.	2026-10-08 17:11:33 +02:00
mesh-admin	72e0a851cf	Merge pull request 'Issue 331: a declared tool check is never asked on the live link' (#218) from issue/331-a-tool-check-is-never-asked into main	2026-10-08 15:06:55 +00:00
jochen	33b0ee3d53	Issue 331: state how the fix is proved, what CI still skips, and that the grants hold live	2026-10-08 17:02:52 +02:00
mesh-admin	31664fcd80	Merge pull request 'Issue 325 and ADR 0261: an assignment made while its module's build runs is kept pending' (#214) from fix/325-assign-says-why-a-module-is-not-there into main	2026-10-08 14:58:04 +00:00
jochen	6dda1b1d77	ADR 0261: one condition per pending assignment, and a raised row kept until it clears ... The second review of mesh-controller#150 changed points 1, 6 and 7; say what the code now does.	2026-10-08 16:46:42 +02:00
jochen	3a09387c8e	ADR 0261: an assignment made while its module's build runs is kept pending ... The review of mesh-controller#150 found the controller now makes an assignment after the person's act, which no record decided. Decide it, cite it from the glossary and to-be 45, and correct issue 325's account of what is settled where and what is sent.	2026-10-08 16:46:40 +02:00
jochen	63754ca874	Issue 325: assign said no module of that name while the module's build ran ... Register the symptom and the fix in mesh-controller#150 (replay R325 in mesh-lab#68), and name the pending assignment in the glossary.	2026-10-08 16:46:40 +02:00
jochen	08e065fbb6	Issue 331: record why no declared tool check was ever asked on a live machine	2026-10-08 16:45:21 +02:00
mesh-admin	1782f1ad74	Merge pull request 'Issues 326-330: research 036's live bus faults, measured again and diagnosed' (#217) from issues/036-bus-faults into main	2026-10-08 14:29:17 +00:00
jochen	c64a7b3d4a	Issues 326-330: register research 036's live bus faults, each diagnosed ... The bus's own numbers were unexplained and raised by nothing. Measured again read-only: mesh-delivery rewrites unchanged deliveries (326), every controller verb dials its own connection (327), API errors have no reader (328), event consumers outlive their declaration (329), and design 25's dead-letter stream was never built (330). The two slow consumers join issue 270, whose missing system account they share.	2026-10-08 16:27:34 +02:00
mesh-admin	7d1e3822bf	Merge pull request 'ADR 0260: three standing reads, drop-in directories are no module's, the lists grow only in the open' (#215) from fix/0260-path-check-facts into main	2026-10-08 14:27:19 +00:00