jschoubben
d348256090
Playbooks 07 and 08: lessons of 2026-10-28 (progress tree, report cadence, local integration run, group members, delivered, fixtures)
2026-10-28 11:10:26 +01:00
mesh-tools
2ea3368b76
Merge pull request 'Design 47: ADR 0564 homes health (L4), and milestones L5 to L7 give the controller's other jobs their homes before L3's lease write' ( #488 ) from docs/47-adr-0564 into main
2026-10-28 09:46:31 +00:00
jschoubben
3c2d5af436
Design 47: milestones L5 to L7 join L4 as the homes of the controller's other jobs
...
mesh/delivery merged: source.main moved to novox/hq@2ea3368b76d1
mesh/check pass 3c2d5af436fb on 8f8393fa9343 | carried from 2ea3368b76d1 | unit 39 run, 0 kept, 1 skipped | integration 39 run, 0 kept, 1 skipped | co…
Brings in docs/47-072-milestones (edbb53b ): the rows L5 to L7 and the paragraph that orders L4 to L7
before L3's lease write. L4 keeps the row that follows ADR 0564; that branch's earlier L4 wording,
which named events the record does not keep, is dropped.
2026-10-28 10:42:35 +01:00
jschoubben
bcad1e363a
Design 47 and the glossary home ADR 0564: health leaves the controller in milestone L4
...
ADR 0564 is accepted on the operator's Approve. Design 47 names it and gains L4's row (issue 1952);
the glossary gains condition keeper, observer and take-over, and finding, self-check and the
watchman say where they are kept and held now.
2026-10-28 10:41:29 +01:00
jschoubben
edbb53bb78
Design 47: milestones L4 to L7 give the controller's other jobs their homes before L3's lease write
...
The operator said yes on 2026-10-28 to making research 072's proposed homes milestones after L3,
so their decision records and design can start beside L3. ADR 0547 §11 makes the lease write wait
for every one of them; issues 1952 to 1955 carry each, a decision record first.
2026-10-28 09:40:05 +01:00
mesh-tools
32da464794
Merge pull request 'How-we-build: a bus permission is proven under the real permission (ADR 0560); playbook 07 notes the 2026-10-27 failure' ( #486 ) from pb/seed-lessons-2026-10-27 into main
2026-10-27 21:19:59 +00:00
mesh-tools
10bc8d396c
Merge pull request 'Design 47: R4d says what it became, three image reworks done and n8n left by ADR 0506' ( #487 ) from design/47-r4d-done into main
2026-10-27 21:16:02 +00:00
jschoubben
8e732e22ae
Design 47: R4d is done; record the three reworks, n8n's exit and the issues (ADR 0480, 0487, 0497, 0506)
mesh/delivery merged: source.main moved to novox/hq@10bc8d396ceb
mesh/check pass 8e732e22aeff on 8f8393fa9343 | carried from 2ea3368b76d1 | unit 39 run, 0 kept, 1 skipped | integration 39 run, 0 kept, 1 skipped | co…
2026-10-27 22:14:06 +01:00
jschoubben
6ef40bbcc7
How-we-build: a bus permission is proven under the real permission (ADR 0560); playbook 07 keeps only the failure note, as the operator asked
mesh/delivery merged: source.main moved to novox/hq@32da46479424
mesh/check pass 6ef40bbcc7d8 on 8f8393fa9343 | carried from 2ea3368b76d1 | unit 39 run, 0 kept, 1 skipped | integration 39 run, 0 kept, 1 skipped | co…
2026-10-27 20:36:54 +01:00
jschoubben
7ff4c7ce68
Playbook 07: the developer runs the node-permission test locally as a named exception to step 1
mesh/delivery closed: a newer head of the same pull request
mesh/check pass 7ff4c7ce6888 on 420751b214c0 | unit 39 run, 0 kept, 1 skipped | integration 39 run, 0 kept, 1 skipped | composition passed
2026-10-27 20:29:11 +01:00
jschoubben
0d1aa93e37
Playbook 07: keep only the node-agent permission lesson; the operator keeps merging before the check by choice (2026-10-27)
2026-10-27 20:28:16 +01:00
jschoubben
1afab9739e
Playbook 07: a node-agent change runs under the node's real permissions before review approves, and a pull request whose safety is its check is approved only on its passing verdict (issue 1126, 2026-10-27)
2026-10-27 20:27:41 +01:00
mesh-tools
420751b214
Merge pull request 'Design 47: a placement change is answered by the nodes it places before it merges (ADR 0559, issue 1126)' ( #485 ) from feat/1126-l2b into main
2026-10-27 07:21:07 +00:00
jschoubben
043f8ecf9c
Design 47 and the glossary: a placement change is answered by the nodes it places before it merges (ADR 0559, issue 1126)
...
mesh/delivery merged: source.main moved to novox/hq@420751b214c0
mesh/delivery-group group feat/1126-l2b merged: every member is merged
mesh/check pass 043f8ecf9cfa on 420751b214c0 | unit 39 run, 0 kept, 1 skipped | integration 39 run, 0 kept, 1 skipped | composition passed
The seed and every later placement pull request were to be checked as equal to what runs,
which no composition outside the node can show; the nodes now answer a placement candidate.
2026-10-27 02:14:09 +01:00
mesh-tools
132aae8433
Merge pull request 'Design 47 says what a node composes from: placement, its config layers, and the node record (issue 1126)' ( #482 ) from feat/1126-nodes-compose into main
2026-10-26 21:11:12 +00:00
jschoubben
28d84f31bf
Merge remote-tracking branch 'origin/main' into feat/1126-nodes-compose
mesh/delivery merged: source.main moved to novox/hq@132aae843383
mesh/delivery-group group feat/1126-nodes-compose merged: every member is merged
mesh/check pass 28d84f31bfcb on 132aae843383 | unit 39 run, 0 kept, 1 skipped | integration 39 run, 0 kept, 1 skipped | composition passed in 2ms
2026-10-26 21:56:52 +01:00
mesh-tools
278ca42b3d
Merge pull request 'Playbooks 07 and 08: one release, one check, no try, push once after the review (ADR 0548)' ( #484 ) from pb/one-check-per-release into main
2026-10-26 19:55:30 +00:00
jschoubben
1dab64134a
Playbooks 07 and 08: the one check is one status, mesh/check; drop the leftover try wording (review fixes)
mesh/delivery merged: source.main moved to novox/hq@278ca42b3df2
mesh/check pass 1dab64134a56 on 132aae843383 | unit 39 run, 0 kept, 1 skipped | integration 39 run, 0 kept, 1 skipped | composition passed
2026-10-26 20:52:36 +01:00
jschoubben
a0e4c1fe17
Playbooks 07 and 08: one release, one check, no try, push once after the review (ADR 0548)
...
Build capacity is the mesh's scarcest resource: a try before and after the review plus a check per fix round on an open pull request spent it several times per release.
2026-10-26 20:50:37 +01:00
jschoubben
7c88f297fc
Design 47: a settings-form module's values in the placement file, the vault's own, both sources' readers, the switch when placed, and the order of the delivery and the seed (issue 1126)
mesh/delivery-group group feat/1126-nodes-compose checking: 4 of 6 member(s) ready
mesh/delivery closed: a newer head of the same pull request
mesh/check checking 7c88f297fc59 on 278ca42b3df2 | novox/hq#482 in group feat/1126-nodes-compose
2026-10-26 19:45:32 +01:00
jschoubben
495d740d5f
Design 47: a placed node's want says self and names no composition; a yes names the composition allowed (issue 1126, ADR 0547 §2, §3)
mesh/delivery closed: a newer head of the same pull request
mesh/check failed: ace: novox/mesh-catalog#505 does not merge into the trunk: files in conflict: .gitignore | 495d740d5ffc on d698942b1d56 | unit 1245…
2026-10-26 19:17:48 +01:00
jschoubben
df4ff3d039
Design 47: a model-access consumer placed before the vault serves licences is refused by the guard (issue 1126)
2026-10-26 19:09:16 +01:00
mesh-tools
d698942b1d
Merge pull request 'Design 47's milestone table names each issue once, and design 53 says milestones are records (issue 1781)' ( #483 ) from feat/1781-milestone-records into main
2026-10-26 18:06:44 +00:00
jschoubben
a6cc3d2e0b
Design 47: a node never applies a stand-in, and composes nothing of its own until the vault seals its secrets to it (issue 1126)
mesh/delivery closed: a newer head of the same pull request
mesh/check checking a6cc3d2e0b68 on 515c405c8939 | novox/hq#482 in group feat/1126-nodes-compose
2026-10-26 18:59:06 +01:00
jschoubben
b6572acd72
Design 47: every read a node's account gains to compose, and that a module with an own secret does not move until the vault seals it to the node (issue 1126, ADR 0555)
mesh/delivery-group group feat/1126-nodes-compose checking: 4 of 5 member(s) ready
mesh/delivery closed: a newer head of the same pull request
mesh/check checking b6572acd72e5 on 515c405c8939 | novox/hq#482 in group feat/1126-nodes-compose
2026-10-26 18:49:09 +01:00
jschoubben
ebc1a84e59
Design 53 §13: the seed closes a milestone whose issues are all done, wontfix or resolved with no live fix included, as the tracker counts it (issue 1781)
mesh/delivery merged: source.main moved to novox/hq@d698942b1d56
mesh/delivery-group group feat/1781-milestone-records merged: every member is merged
mesh/check pass ebc1a84e592e on 132aae843383 | a compiled program is not refused: mesh-build-node reported no programs | unit 39 run, 0 kept, 1 skippe…
2026-10-26 18:40:12 +01:00
jschoubben
5bb109e36e
Design 47: the node-record read is the composer copy's one intended grant beyond the controller's, and what a hand-back means for it (issue 1126, ADR 0555)
mesh/delivery closed: a newer head of the same pull request
mesh/check checking 5bb109e36ea7 on 515c405c8939 | novox/hq#482 in group feat/1126-nodes-compose
2026-10-26 18:33:46 +01:00
jschoubben
d948774794
Design 47: the node record rides in the node's own have key (issue 1126, ADR 0555 §3)
2026-10-26 18:30:28 +01:00
jschoubben
68f8a8c198
Design 47: the found tunnel is decided at adoption; adoption and enrolled peers are read, not written (issue 1126, ADR 0555)
2026-10-26 18:26:53 +01:00
jschoubben
b5b84fafc6
Design 47: config placement, as ADR 0348 words it (issue 1126)
2026-10-26 18:21:31 +01:00
jschoubben
0488bc1801
Design 47 says what a node composes from: placement with the node's decided facts and settings layers, and the node's own record (issue 1126, ADR 0549, ADR 0555)
2026-10-26 18:20:51 +01:00
jschoubben
973182cdf9
Design 53: milestones are records of the tracker, an issue's milestone is its own link, and the seed reads the design's table once (ADR 0493, issue 1781)
2026-10-26 18:00:18 +01:00
jschoubben
97d600650a
Design 47: each issue in one milestone row, R4a's range written out, and row M1 for the milestone records, so the tracker's seed takes the table without a guess (issue 1781)
2026-10-26 18:00:18 +01:00
mesh-tools
515c405c89
Merge pull request 'Design 47 names the controller-exit milestones as rows; the glossary and playbook 07 name progress (issue 1947)' ( #481 ) from feat/1947-progress into main
2026-10-26 16:42:26 +00:00
jschoubben
a6e27687db
Design 47: 1945 is L1's issue alone, and milestone 3 names 774 with 1126's rest carried by its note (issue 1947, review round 1)
...
mesh/delivery merged: source.main moved to novox/hq@515c405c8939
mesh/delivery-group group feat/1947-progress merged: every member is merged
mesh/check pass a6e27687db42 on 132aae843383 | unit 39 run, 0 kept, 1 skipped | integration 39 run, 0 kept, 1 skipped | composition passed in 2ms
An issue belongs to one milestone (ADR 0493 §2); R6 is delivered and named 1945 for parts
L1 now carries.
2026-10-26 17:03:14 +01:00
jschoubben
b7dabd8ceb
Design 47 gives its running milestones rows; the glossary and playbook 07 name progress (issue 1947)
...
The three milestones of the controller leaving build and delivery were prose only, so no
reader of the table saw the running work; 1209 and 971 were listed in two milestones
against ADR 0493 §2.
2026-10-26 16:40:12 +01:00
mesh-tools
3a5c4c7c4d
Merge pull request 'Designs 47, 24 and 39 and the glossary follow ADR 0548, 0549, 0550, 0551 and ADR 0547's answers' ( #480 ) from amend/0548-0551 into main
2026-10-26 12:34:59 +00:00
jschoubben
250c3ff605
Design 24: the pointer to 'Every secret lives in the vault' says above
mesh/delivery merged: source.main moved to novox/hq@3a5c4c7c4d9c
mesh/check pass 250c3ff605ab on 132aae843383 | unit 39 run, 0 kept, 1 skipped | integration 39 run, 0 kept, 1 skipped | composition passed
2026-10-26 13:33:23 +01:00
jschoubben
a3f6e967c0
Design 24: the controller hands the vault only the covered accounts' values until the third milestone, and the break-glass recovery is below (review of ADR 0550's amendment)
2026-10-26 13:32:37 +01:00
jschoubben
11b0a450c3
Designs 47, 24 and 39 follow ADR 0548 to 0551: one check per set of heads with carried verdicts and merge turns, placement in the catalogue, every secret in the vault
...
Design 47 names ADR 0548 (a check runs to its end, a trunk move carries a verdict by its package digests, the hold and the merge turn), ADR 0551 (the hold and turns only while the check gates merges), ADR 0549 (placement files read by the indexer) and ADR 0550 (the vault signs and adopts the loaded hashes), and ADR 0547's answers on placement and signing. Design 24 gains every secret in the vault; design 39 moves grants and tokens into it. The glossary gains carried verdict, merge turn and placement file.
2026-10-26 13:29:30 +01:00
mesh-tools
122cda84b3
Merge pull request 'Playbooks 07 and 08: read the forge branch's head before trusting an agent's push' ( #479 ) from pb/read-the-pushed-head into main
2026-10-26 10:03:59 +00:00
jschoubben
be1bbe0a65
Playbooks 07 and 08: read the forge head before trusting a reported push, so a try never runs on a push that did not happen
mesh/delivery merged: source.main moved to novox/hq@122cda84b302
mesh/check pass be1bbe0a652a on 132aae843383 | unit 39 run, 0 kept, 1 skipped | integration 39 run, 0 kept, 1 skipped | composition passed
2026-10-26 11:02:44 +01:00
mesh-tools
585551722a
Merge pull request 'Design 47 follows ADR 0547: node agents compose, the grants part composes who may say what, the bus node writes the user list, and the controller leaves build and delivery in three milestones (issue 1945)' ( #478 ) from fix/1945-user-list-follows-r into main
2026-10-26 07:51:14 +00:00
jschoubben
f1c50d3e01
Design 47: the assigner's acceptance test names its six rules, as ADR 0547 §4 leaves them; the bus node follows the controller's list until the third milestone, for hand-back; placement stays where it is for now (issue 1126)
mesh/delivery merged: source.main moved to novox/hq@585551722a4e
mesh/check pass f1c50d3e018c on 132aae843383 | unit 39 run, 0 kept, 1 skipped | integration 39 run, 0 kept, 1 skipped | composition passed in 2ms
2026-10-26 02:59:58 +01:00
jschoubben
d70791ddee
Design 47: sentences that still named the controller as composer, issuer or reader of grants follow ADR 0547 as amended
2026-10-26 02:58:12 +01:00
jschoubben
5bdeb8db83
Design 47: take-over's test as ADR 0547's insight states it
2026-10-26 02:57:45 +01:00
jschoubben
d94f8a05a8
Design 47 follows ADR 0547: node agents compose their own modules, a grants part composes who may say what, the bus node writes the user list alone, and the controller leaves build and delivery in three milestones
2026-10-26 02:57:45 +01:00
mesh-tools
fd0d712f7d
Merge pull request 'Design 47 and the as-is delivery after release 6: acceptance tests on wants, as-is 04 and 13 as the mesh runs now (issue 1130)' ( #477 ) from fix/1130-after-r6 into main
2026-10-26 00:39:21 +00:00
jschoubben
de4c69d476
Name no node in design 47's test 10 proof: hq is public (issue 1130, review round 2)
mesh/delivery merged: source.main moved to novox/hq@fd0d712f7d97
mesh/check pass de4c69d47634 on 132aae843383 | a compiled program is not refused: mesh-build-node reported no programs | unit 39 run, 0 kept, 1 skippe…
2026-10-26 01:28:32 +01:00
jschoubben
9eb963d5f1
Give each restated acceptance test of design 47 its own proof, and add puts, the hand path and the builds bucket to as-is 04 (issue 1130, review round 1)
...
Tests 18 and 19 do not cover tests 3, 7, 9, 10 and 11 as restated, so each now names the test or live read that proves it, or says it is not yet proved.
2026-10-26 01:27:21 +01:00