Commit Graph

  • 4b5793144d ADR 0272: §4 as built after the confirmation review, ADR 0266 linked now it is merged jochen 2026-10-09 13:15:59 +02:00
  • 3bdd4e8040 Merge remote-tracking branch 'origin/main' into decision/0272-mesh-cli-the-operators-command jochen 2026-10-09 13:15:36 +02:00
  • d3cb9fedf4 ADR 0272 accepted (the operator, 2026-10-09) jochen 2026-10-09 13:02:45 +02:00
  • d7c97d02fa Issue 344: name the node-engine's repository as code jochen 2026-10-09 12:56:54 +02:00
  • bac7feca77 ADR 0272: the review's answers — every line a call, the socket grants nothing, the terminal does not follow assign, each claim and how it is checked jochen 2026-10-09 12:56:44 +02:00
  • 3143f5c698 Issue 344: gap 9 narrowed by mesh-host #61; the tools' sudo and the forge's rule precedence jochen 2026-10-09 12:56:41 +02:00
  • 2700ef7096 Merge pull request 'ADR 0266 and issue 333: on the control node, agents run under an account of their own' (#225) from decision/0266-agents-run-under-an-account-of-their-own into main mesh-admin 2026-10-09 10:56:11 +00:00
  • 2ba0d68306 Issue 347: a pull request opened after its push is never checked, and nothing says so jochen 2026-10-09 12:55:26 +02:00
  • 6a7cf421a9 Merge pull request 'Issue 346: a setting a verb may set is pasted raw into its file, so an untrusted file is an injection point' (#246) from issues/346-a-setting-a-verb-may-set-is-pasted-raw-into-its-file into main mesh-admin 2026-10-09 10:51:03 +00:00
  • 2ed56a80b8 Merge pull request 'Issue 345: a calendar reminder shows transparent and empty, and the mesh had no tool to look at it' (#245) from issues/345-a-reminder-window-shows-transparent-and-empty into main mesh-admin 2026-10-09 10:50:55 +00:00
  • 0ff6bd2267 Issue 346: user-dirs.dirs is trusted again for now (mesh-catalog #158), the stop-gap before the fix jschoubben 2026-10-09 12:40:26 +02:00
  • 79f31ca113 Issue 346: a setting a verb may set is pasted raw into its file, so an untrusted file is an injection point jschoubben 2026-10-09 12:35:30 +02:00
  • cb907d5810 ADR 0266: an agent can merge its own pull request, and the restart condition's quiet counts on the controller's clock jochen 2026-10-09 12:27:13 +02:00
  • a4e132e47b Issue 345: picom is the first suspect, the graphics stack, and compositing off as the first test jschoubben 2026-10-09 12:25:42 +02:00
  • 11d261e582 Issue 344: the screen is readable through the display server's tools jochen 2026-10-09 12:19:54 +02:00
  • 41060224e6 ADR 0272: the agent account's judgement comes from the engine's statement, never from the request jochen 2026-10-09 12:13:03 +02:00
  • e143f6b193 Issue 343: name the node-engine's repository as an identifier jochen 2026-10-09 12:12:34 +02:00
  • 57bb4dab74 Issue 343: phase 1 of ADR 0272 is open as four pull requests jochen 2026-10-09 12:12:23 +02:00
  • 322f3aec36 ADR 0272: a path in a line is read where the controller runs jochen 2026-10-09 12:11:25 +02:00
  • e8f0f43f1b Issue 344: an agent can merge its own pull request jochen 2026-10-09 12:09:17 +02:00
  • 599c3835f0 Issue 345: a calendar reminder shows transparent and empty, and the mesh had no tool to look at it jschoubben 2026-10-09 12:07:49 +02:00
  • 7d4678c5fb Issue 344: record the known gaps in the agent's boundary, accepted for now by the operator jochen 2026-10-09 12:03:36 +02:00
  • 1ad9959b16 ADR 0272: say how the socket keeps ADR 0004, answer the operator and agent accounts only, and keep the bus request out of the SDK (ADR 0039) jochen 2026-10-09 12:01:45 +02:00
  • 95d78f7011 ADR 0272 (proposed) and issue 343: the controller's terminal has no command jochen 2026-10-09 11:59:34 +02:00
  • d7999e6fc9 ADR 0266: the setuid search's bound is 15 minutes, and the two routes and the restart condition the review of 2026-10-09 found jochen 2026-10-09 11:49:25 +02:00
  • ee314a26ca ADR 0266: say where the boundary stands on 2026-10-09, and the rollout's order jochen 2026-10-09 11:03:27 +02:00
  • e215dd95c4 ADR 0266: record the command allow list, the judge's final lists, and the store gap jochen 2026-10-08 21:32:42 +02:00
  • dbc3ec40e0 ADR 0266: say it detects rather than prevents, and bound what review found jochen 2026-10-08 20:53:32 +02:00
  • 537e5b733b ADR 0266: on the control node agents run under an account of their own jochen 2026-10-08 18:37:55 +02:00
  • d81ae38970 Merge pull request 'Issue 340: an agent can plant a hook in every agent session on the mesh' (#240) from issues/340-an-agent-can-plant-a-hook-in-every-session into main mesh-admin 2026-10-09 08:00:25 +00:00
  • cdf0e71d87 Issue 340: removing from or restoring to the operator's own home is refused too jochen 2026-10-09 09:51:57 +02:00
  • 0badde3a56 Issue 340: say plainly which test refuses the new url jochen 2026-10-09 09:43:12 +02:00
  • 523bb9c55a Issue 340: the home scope reached the operator's own home, and bus text still renders jochen 2026-10-09 09:43:03 +02:00
  • b43505d88b Merge pull request 'ADR 0270 and 0271 (accepted): a held delivery a later merge contains, or that moves nothing, ends by itself; a send held for the bus's step is told at once' (#241) from decision/0270-0271-held-deliveries-end-and-bus-step-said into main mesh-admin 2026-10-09 07:35:21 +00:00
  • 29bf2cae30 Merge branch 'main' into decision/0270-0271-held-deliveries-end-and-bus-step-said mesh-admin 2026-10-09 07:30:09 +00:00
  • 8a6f19e457 Issue 340: record the operator's decisions, and open 342 for passwords taken as settings jochen 2026-10-09 09:29:39 +02:00
  • cbd9f092d8 ADR 0270 and 0271 accepted: their home in designs 47 and 45, and the glossary's final states jochen 2026-10-09 09:24:30 +02:00
  • 9744ed7b9d Merge pull request 'Issue 336: a send held for the bus's planned step raises no condition, so the operator is never asked' (#228) from issues/336-a-send-held-for-the-bus-step-raises-nothing into main mesh-admin 2026-10-09 07:23:41 +00:00
  • a5656b9cce Merge pull request 'Record hygiene: resolve issues 310, 312, 313, 314, 318, 325, 327, 330 and 337, whose fixes are merged and live' (#239) from issues/hygiene-resolve-merged-fixes into main mesh-admin 2026-10-09 07:23:31 +00:00
  • 79de22423d ADR 0270: how a failed new-module build is said, a one-machine module is never covered, and which gate tests the forge module jochen 2026-10-09 03:24:10 +02:00
  • 3d71532a3a Issue 341: a merge check judges the pull request's head, not what merging it makes jochen 2026-10-09 03:13:40 +02:00
  • b04498c01f ADR 0270: the forge's ancestry decides covered, and say what covered means and does not (review of #241) jochen 2026-10-09 02:58:36 +02:00
  • 1dbfb2d85a Issue 340: the whole layer of a module with a mergeable file is the terminal's, and the text still registrable is a risk said jochen 2026-10-09 02:55:23 +02:00
  • 31e78d62d4 Name the pull requests that build ADR 0270 and 0271 jochen 2026-10-09 02:35:05 +02:00
  • 6163a74bb2 ADR 0270 and 0271 (proposed): a held delivery whose change runs ends by itself; a send held for the bus's step is told at once jochen 2026-10-09 02:34:18 +02:00
  • 9bd0dcc611 Merge remote-tracking branch 'origin/issues/336-a-send-held-for-the-bus-step-raises-nothing' into decision/0270-0271-held-deliveries-end-and-bus-step-said jochen 2026-10-09 02:31:05 +02:00
  • 2953b8a8f4 Issue 340: an agent can plant a hook in every agent session on the mesh jochen 2026-10-09 02:30:11 +02:00
  • 171ac2a163 Merge pull request 'ADR 0269: what the mesh's own declaration stopped is started again when it goes' (#238) from decision/0269-what-the-meshs-own-declaration-stopped-is-started-again into main mesh-admin 2026-10-09 00:20:32 +00:00
  • 120cdcd25a Issues 310, 312, 313, 314, 318, 325, 327, 330, 337: resolved, their fixes merged and seen live jochen 2026-10-09 02:19:09 +02:00
  • a11b14f7ae ADR 0269 accepted: note the narrowing on ADR 0118, and give it a home in the node-engine's design jochen 2026-10-09 02:17:32 +02:00
  • 1a813ba313 ADR 0269: the -- check covers the calls in internal/system that name a service resource's unit jochen 2026-10-09 02:03:32 +02:00
  • 4b6642de5e Merge pull request 'Issue 339: the merge order against mesh-host #61, used-as-found as a behaviour change, the review's follow-ups' (#236) from issues/339-review-follow-ups into main mesh-admin 2026-10-08 23:55:39 +00:00
  • 61ab74c70e ADR 0269: the catch-up happens when the timer's last run is more than a week back jochen 2026-10-09 01:54:51 +02:00
  • 2e2be955e9 ADR 0269: say that a unit stopped by hand while held cannot be told apart, that a restored Persistent timer catches up at once, and what is left alone jochen 2026-10-09 01:54:42 +02:00
  • 68018c7c1b ADR 0269 (proposed): what the mesh's own declaration stopped is started again when it goes jochen 2026-10-09 01:35:27 +02:00
  • 1d9d535912 Issue 339: an unmarked file counts as trusted, and the rollback hazard of the trusted field and its fix jochen 2026-10-09 01:42:51 +02:00
  • 5b0b550157 Merge pull request 'Issue 319: why no walk opened, and four held deliveries closed with stop' (#237) from issues/319-diagnosis-held-deliveries-closed into main mesh-admin 2026-10-08 23:39:02 +00:00
  • a93ecf90ea Issue 319: record why no walk opened, and the four held deliveries closed with stop jochen 2026-10-09 01:38:02 +02:00
  • 5d054b722d Issue 339: the terminal's settings are derived from what a module serves and which files it trusts; a found directory is its own condition the gate never reads as a fault jochen 2026-10-09 01:24:14 +02:00
  • 5fbd89c062 Issue 339: the gate reads a directory used as found as a wait for a person; the trust anchors are the terminal's jochen 2026-10-09 00:55:54 +02:00
  • e62ab24658 Merge pull request 'ADR 0268: the login shell's execute is withheld on the control-node until a call to it needs a person's approval' (#235) from decision/0268-the-login-shells-execute-is-withheld-on-the-control-node into main mesh-admin 2026-10-08 22:30:08 +00:00
  • ef2a38474f Merge pull request 'Research 039: a tool or verb that needs a person's approval' (#233) from research/039-a-tool-that-needs-a-persons-approval into main mesh-admin 2026-10-08 22:30:03 +00:00
  • ab027691e1 Issue 339: name the merge order against mesh-host #61, record used-as-found as a behaviour change, and the review's follow-ups jochen 2026-10-09 00:28:55 +02:00
  • 0f02ac47d4 Merge pull request 'Issue 339: any caller of the settings verb could have the node-engine hand a system directory to an account' (#234) from issues/339-a-verb-can-place-a-directory-at-the-machines-own into main mesh-admin 2026-10-08 22:21:03 +00:00
  • 7bd868786f ADR 0268: the login shell's execute is withheld on the control-node until a call to it needs a person's approval jochen 2026-10-09 00:12:30 +02:00
  • ccb54450ea Research 039: the login shell's execute is the first case, and narrow read tools must come first or approvals become noise jochen 2026-10-09 00:01:47 +02:00
  • ac3a67ebab Issue 339: any caller of the settings verb could have the node-engine hand a system directory to an account jochen 2026-10-09 00:00:04 +02:00
  • c31a76cac5 Research 039: a tool or verb that needs a person's approval, so an agent may ask but cannot act alone jochen 2026-10-08 23:59:26 +02:00
  • e2de8811a3 Merge pull request 'ADR 0267: an artifact is rebuilt only when its build source changes, and a module moves only along build dependencies on artifacts' (#232) from decision/0267-a-module-moves-when-its-build-source-changes into main mesh-admin 2026-10-08 21:13:14 +00:00
  • d2fe9bc870 Accept ADR 0267: the operator's word of 2026-10-08 jochen 2026-10-08 23:11:35 +02:00
  • 7d3f4407a7 ADR 0267 (proposed): an artifact is rebuilt only when its build source changes jochen 2026-10-08 23:05:51 +02:00
  • d0be529194 Merge pull request 'Issue 337: the store's reader can read the controller's signing key (critical)' (#230) from issues/337-the-stores-reader-can-read-the-controllers-signing-key into main mesh-admin 2026-10-08 20:16:30 +00:00
  • 7f78016f07 Issue 337: say that only what is gone is reported revoked, and that a grant the reader passed on is taken back with CASCADE jochen 2026-10-08 22:11:16 +02:00
  • b17839a7db Issue 337 after review: say control-node, drop the store's operational settings, and match the fix's revoke-by-grantor and read-back jochen 2026-10-08 22:02:30 +02:00
  • 7ade322bcb Register issue 338: a module built from a shared repository moves on every merge to it jochen 2026-10-08 21:59:18 +02:00
  • 4955a663d3 Merge pull request 'Issue 335: a build that passed its gate was failed and put back by the first machine's later reports' (#227) from issues/335-a-passed-gate-was-failed-by-later-reports into main mesh-admin 2026-10-08 19:51:27 +00:00
  • bbbaf943e8 Issue 335: resolved by mesh-controller#165 (8170fc5) with replay R335 jochen 2026-10-08 21:49:00 +02:00
  • 6c297214ad Issue 337: the store's reader could read the controller's signing key and every secret the store holds jochen 2026-10-08 21:46:01 +02:00
  • a1c85c6de5 Merge pull request 'Design 52: until it is adopted, the workstation's fstab line still mounts at boot (review follow-up)' (#229) from fix/shares-review-followups into main mesh-admin 2026-10-08 19:37:03 +00:00
  • ebffbaa17e Merge pull request 'ADR 0264 and issue 330: a message a consumer gives up on is kept until a person delivers it again or drops it' (#223) from fix/330-a-message-given-up-on-is-kept into main mesh-admin 2026-10-08 19:26:57 +00:00
  • 4dd52cace6 Design 52: say the workstation's fstab line still mounts at boot until it is adopted, and can hold the boot 30 s jochen 2026-10-08 21:14:34 +02:00
  • 6fdaeb79ba Issue 334 and ADR 0264: an ask a seat gave up on can only be dropped for now jochen 2026-10-08 18:38:54 +02:00
  • b0986e2ae0 Issue 330: name the installer's user list among its fixes jochen 2026-10-08 17:56:37 +02:00
  • d1e0e121d6 ADR 0264 and issue 330: keep what a consumer gives up on until a person acts jochen 2026-10-08 17:37:49 +02:00
  • e6f0e7e359 Issue 336: a send held for the bus's planned step raises no condition, so the operator is never asked jochen 2026-10-08 20:58:44 +02:00
  • f346efb938 Issue 335: leave fixed-by for the merge, and call the put-back refusal a guard jochen 2026-10-08 20:49:40 +02:00
  • 4eb8be9e66 Merge pull request 'ADR 0263 (accepted), research 038, design 52: a share is a provision, a node mounts it on demand' (#221) from feat/mounts-module into main mesh-admin 2026-10-08 18:39:59 +00:00
  • b409537dbc Issue 335: a build that passed its gate was failed and put back by the first machine's later reports jochen 2026-10-08 20:27:36 +02:00
  • d05c9d7ca4 Name the safe order of taking shares into use without the retired word jochen 2026-10-08 20:22:05 +02:00
  • bffd0f90d0 ADR 0263 and design 52 after review: what each export promises, per-node grants, refusals, not-built checks, and a read-only-first rollout jochen 2026-10-08 20:21:48 +02:00
  • 0811b21be1 Merge pull request 'ADR 0265 and issue 327: a verb that reads is answered on the serving controller's own connection, and every connection says what it is' (#224) from fix/327-a-verb-reads-on-the-serving-connection into main mesh-admin 2026-10-08 18:21:28 +00:00
  • 0a38d9b21d ADR 0265: a panicking verb answers, and refused logins are not a reconnect loop jochen 2026-10-08 20:04:19 +02:00
  • c3a0f7a595 ADR 0265 and issue 327: answer read verbs on the serving connection and name every connection jochen 2026-10-08 17:56:28 +02:00
  • 8665027873 Merge pull request 'ADR 0262: a left-out module's data is backed up as this controller reads it, and an unplaceable line is listed' (#226) from fix/0262-backup-as-read into main mesh-admin 2026-10-08 16:41:31 +00:00
  • f30b2a3ae0 ADR 0262: note how a left-out module's data is backed up, as the controller now does it jochen 2026-10-08 18:38:09 +02:00
  • f4b79ba7c2 Design 52 says how the modules were built: the server's bucket carries each share's path, two root processes, settings default to none jochen 2026-10-08 18:37:15 +02:00
  • 34899385ec Accept ADR 0263 with the operator's choices: one share per folder so backups are never exported, mesh machines only jochen 2026-10-08 18:23:23 +02:00
  • 79bd9911e6 Merge pull request 'ADR 0262: a preference has a default in its manifest, and the operator's own value has none' (#216) from feat/setting-defaults into main mesh-admin 2026-10-08 16:18:53 +00:00
  • 6a9bc3f4b3 ADR 0262: say what a left-out module loses, and how far an entry's unknown key is read jochen 2026-10-08 17:55:38 +02:00
  • f09c9befdf ADR 0262: a module with a field the controller does not know is left out and raised, never read silently jochen 2026-10-08 17:34:52 +02:00