4b5793144d
ADR 0272: §4 as built after the confirmation review, ADR 0266 linked now it is merged
jochen2026-10-09 13:15:59 +02:00
3bdd4e8040
Merge remote-tracking branch 'origin/main' into decision/0272-mesh-cli-the-operators-command
jochen2026-10-09 13:15:36 +02:00
d3cb9fedf4
ADR 0272 accepted (the operator, 2026-10-09)
jochen2026-10-09 13:02:45 +02:00
d7c97d02fa
Issue 344: name the node-engine's repository as code
jochen2026-10-09 12:56:54 +02:00
bac7feca77
ADR 0272: the review's answers — every line a call, the socket grants nothing, the terminal does not follow assign, each claim and how it is checked
jochen2026-10-09 12:56:44 +02:00
3143f5c698
Issue 344: gap 9 narrowed by mesh-host #61; the tools' sudo and the forge's rule precedence
jochen2026-10-09 12:56:41 +02:00
2700ef7096
Merge pull request 'ADR 0266 and issue 333: on the control node, agents run under an account of their own' (#225) from decision/0266-agents-run-under-an-account-of-their-own into main
mesh-admin2026-10-09 10:56:11 +00:00
2ba0d68306
Issue 347: a pull request opened after its push is never checked, and nothing says so
jochen2026-10-09 12:55:26 +02:00
6a7cf421a9
Merge pull request 'Issue 346: a setting a verb may set is pasted raw into its file, so an untrusted file is an injection point' (#246) from issues/346-a-setting-a-verb-may-set-is-pasted-raw-into-its-file into main
mesh-admin2026-10-09 10:51:03 +00:00
2ed56a80b8
Merge pull request 'Issue 345: a calendar reminder shows transparent and empty, and the mesh had no tool to look at it' (#245) from issues/345-a-reminder-window-shows-transparent-and-empty into main
mesh-admin2026-10-09 10:50:55 +00:00
0ff6bd2267
Issue 346: user-dirs.dirs is trusted again for now (mesh-catalog #158), the stop-gap before the fix
jschoubben2026-10-09 12:40:26 +02:00
79f31ca113
Issue 346: a setting a verb may set is pasted raw into its file, so an untrusted file is an injection point
jschoubben2026-10-09 12:35:30 +02:00
cb907d5810
ADR 0266: an agent can merge its own pull request, and the restart condition's quiet counts on the controller's clock
jochen2026-10-09 12:27:13 +02:00
a4e132e47b
Issue 345: picom is the first suspect, the graphics stack, and compositing off as the first test
jschoubben2026-10-09 12:25:42 +02:00
11d261e582
Issue 344: the screen is readable through the display server's tools
jochen2026-10-09 12:19:54 +02:00
41060224e6
ADR 0272: the agent account's judgement comes from the engine's statement, never from the request
jochen2026-10-09 12:13:03 +02:00
e143f6b193
Issue 343: name the node-engine's repository as an identifier
jochen2026-10-09 12:12:34 +02:00
57bb4dab74
Issue 343: phase 1 of ADR 0272 is open as four pull requests
jochen2026-10-09 12:12:23 +02:00
322f3aec36
ADR 0272: a path in a line is read where the controller runs
jochen2026-10-09 12:11:25 +02:00
e8f0f43f1b
Issue 344: an agent can merge its own pull request
jochen2026-10-09 12:09:17 +02:00
599c3835f0
Issue 345: a calendar reminder shows transparent and empty, and the mesh had no tool to look at it
jschoubben2026-10-09 12:07:49 +02:00
7d4678c5fb
Issue 344: record the known gaps in the agent's boundary, accepted for now by the operator
jochen2026-10-09 12:03:36 +02:00
1ad9959b16
ADR 0272: say how the socket keeps ADR 0004, answer the operator and agent accounts only, and keep the bus request out of the SDK (ADR 0039)
jochen2026-10-09 12:01:45 +02:00
95d78f7011
ADR 0272 (proposed) and issue 343: the controller's terminal has no command
jochen2026-10-09 11:59:34 +02:00
d7999e6fc9
ADR 0266: the setuid search's bound is 15 minutes, and the two routes and the restart condition the review of 2026-10-09 found
jochen2026-10-09 11:49:25 +02:00
ee314a26ca
ADR 0266: say where the boundary stands on 2026-10-09, and the rollout's order
jochen2026-10-09 11:03:27 +02:00
e215dd95c4
ADR 0266: record the command allow list, the judge's final lists, and the store gap
jochen2026-10-08 21:32:42 +02:00
dbc3ec40e0
ADR 0266: say it detects rather than prevents, and bound what review found
jochen2026-10-08 20:53:32 +02:00
537e5b733b
ADR 0266: on the control node agents run under an account of their own
jochen2026-10-08 18:37:55 +02:00
d81ae38970
Merge pull request 'Issue 340: an agent can plant a hook in every agent session on the mesh' (#240) from issues/340-an-agent-can-plant-a-hook-in-every-session into main
mesh-admin2026-10-09 08:00:25 +00:00
cdf0e71d87
Issue 340: removing from or restoring to the operator's own home is refused too
jochen2026-10-09 09:51:57 +02:00
0badde3a56
Issue 340: say plainly which test refuses the new url
jochen2026-10-09 09:43:12 +02:00
523bb9c55a
Issue 340: the home scope reached the operator's own home, and bus text still renders
jochen2026-10-09 09:43:03 +02:00
b43505d88b
Merge pull request 'ADR 0270 and 0271 (accepted): a held delivery a later merge contains, or that moves nothing, ends by itself; a send held for the bus's step is told at once' (#241) from decision/0270-0271-held-deliveries-end-and-bus-step-said into main
mesh-admin2026-10-09 07:35:21 +00:00
29bf2cae30
Merge branch 'main' into decision/0270-0271-held-deliveries-end-and-bus-step-said
mesh-admin2026-10-09 07:30:09 +00:00
8a6f19e457
Issue 340: record the operator's decisions, and open 342 for passwords taken as settings
jochen2026-10-09 09:29:39 +02:00
cbd9f092d8
ADR 0270 and 0271 accepted: their home in designs 47 and 45, and the glossary's final states
jochen2026-10-09 09:24:30 +02:00
9744ed7b9d
Merge pull request 'Issue 336: a send held for the bus's planned step raises no condition, so the operator is never asked' (#228) from issues/336-a-send-held-for-the-bus-step-raises-nothing into main
mesh-admin2026-10-09 07:23:41 +00:00
a5656b9cce
Merge pull request 'Record hygiene: resolve issues 310, 312, 313, 314, 318, 325, 327, 330 and 337, whose fixes are merged and live' (#239) from issues/hygiene-resolve-merged-fixes into main
mesh-admin2026-10-09 07:23:31 +00:00
79de22423d
ADR 0270: how a failed new-module build is said, a one-machine module is never covered, and which gate tests the forge module
jochen2026-10-09 03:24:10 +02:00
3d71532a3a
Issue 341: a merge check judges the pull request's head, not what merging it makes
jochen2026-10-09 03:13:40 +02:00
b04498c01f
ADR 0270: the forge's ancestry decides covered, and say what covered means and does not (review of #241)
jochen2026-10-09 02:58:36 +02:00
1dbfb2d85a
Issue 340: the whole layer of a module with a mergeable file is the terminal's, and the text still registrable is a risk said
jochen2026-10-09 02:55:23 +02:00
31e78d62d4
Name the pull requests that build ADR 0270 and 0271
jochen2026-10-09 02:35:05 +02:00
6163a74bb2
ADR 0270 and 0271 (proposed): a held delivery whose change runs ends by itself; a send held for the bus's step is told at once
jochen2026-10-09 02:34:18 +02:00
9bd0dcc611
Merge remote-tracking branch 'origin/issues/336-a-send-held-for-the-bus-step-raises-nothing' into decision/0270-0271-held-deliveries-end-and-bus-step-said
jochen2026-10-09 02:31:05 +02:00
2953b8a8f4
Issue 340: an agent can plant a hook in every agent session on the mesh
jochen2026-10-09 02:30:11 +02:00
171ac2a163
Merge pull request 'ADR 0269: what the mesh's own declaration stopped is started again when it goes' (#238) from decision/0269-what-the-meshs-own-declaration-stopped-is-started-again into main
mesh-admin2026-10-09 00:20:32 +00:00
120cdcd25a
Issues 310, 312, 313, 314, 318, 325, 327, 330, 337: resolved, their fixes merged and seen live
jochen2026-10-09 02:19:09 +02:00
a11b14f7ae
ADR 0269 accepted: note the narrowing on ADR 0118, and give it a home in the node-engine's design
jochen2026-10-09 02:17:32 +02:00
1a813ba313
ADR 0269: the -- check covers the calls in internal/system that name a service resource's unit
jochen2026-10-09 02:03:32 +02:00
4b6642de5e
Merge pull request 'Issue 339: the merge order against mesh-host #61, used-as-found as a behaviour change, the review's follow-ups' (#236) from issues/339-review-follow-ups into main
mesh-admin2026-10-08 23:55:39 +00:00
61ab74c70e
ADR 0269: the catch-up happens when the timer's last run is more than a week back
jochen2026-10-09 01:54:51 +02:00
2e2be955e9
ADR 0269: say that a unit stopped by hand while held cannot be told apart, that a restored Persistent timer catches up at once, and what is left alone
jochen2026-10-09 01:54:42 +02:00
68018c7c1b
ADR 0269 (proposed): what the mesh's own declaration stopped is started again when it goes
jochen2026-10-09 01:35:27 +02:00
1d9d535912
Issue 339: an unmarked file counts as trusted, and the rollback hazard of the trusted field and its fix
jochen2026-10-09 01:42:51 +02:00
5b0b550157
Merge pull request 'Issue 319: why no walk opened, and four held deliveries closed with stop' (#237) from issues/319-diagnosis-held-deliveries-closed into main
mesh-admin2026-10-08 23:39:02 +00:00
a93ecf90ea
Issue 319: record why no walk opened, and the four held deliveries closed with stop
jochen2026-10-09 01:38:02 +02:00
5d054b722d
Issue 339: the terminal's settings are derived from what a module serves and which files it trusts; a found directory is its own condition the gate never reads as a fault
jochen2026-10-09 01:24:14 +02:00
5fbd89c062
Issue 339: the gate reads a directory used as found as a wait for a person; the trust anchors are the terminal's
jochen2026-10-09 00:55:54 +02:00
e62ab24658
Merge pull request 'ADR 0268: the login shell's execute is withheld on the control-node until a call to it needs a person's approval' (#235) from decision/0268-the-login-shells-execute-is-withheld-on-the-control-node into main
mesh-admin2026-10-08 22:30:08 +00:00
ef2a38474f
Merge pull request 'Research 039: a tool or verb that needs a person's approval' (#233) from research/039-a-tool-that-needs-a-persons-approval into main
mesh-admin2026-10-08 22:30:03 +00:00
ab027691e1
Issue 339: name the merge order against mesh-host #61, record used-as-found as a behaviour change, and the review's follow-ups
jochen2026-10-09 00:28:55 +02:00
0f02ac47d4
Merge pull request 'Issue 339: any caller of the settings verb could have the node-engine hand a system directory to an account' (#234) from issues/339-a-verb-can-place-a-directory-at-the-machines-own into main
mesh-admin2026-10-08 22:21:03 +00:00
7bd868786f
ADR 0268: the login shell's execute is withheld on the control-node until a call to it needs a person's approval
jochen2026-10-09 00:12:30 +02:00
ccb54450ea
Research 039: the login shell's execute is the first case, and narrow read tools must come first or approvals become noise
jochen2026-10-09 00:01:47 +02:00
ac3a67ebab
Issue 339: any caller of the settings verb could have the node-engine hand a system directory to an account
jochen2026-10-09 00:00:04 +02:00
c31a76cac5
Research 039: a tool or verb that needs a person's approval, so an agent may ask but cannot act alone
jochen2026-10-08 23:59:26 +02:00
e2de8811a3
Merge pull request 'ADR 0267: an artifact is rebuilt only when its build source changes, and a module moves only along build dependencies on artifacts' (#232) from decision/0267-a-module-moves-when-its-build-source-changes into main
mesh-admin2026-10-08 21:13:14 +00:00
d2fe9bc870
Accept ADR 0267: the operator's word of 2026-10-08
jochen2026-10-08 23:11:35 +02:00
7d3f4407a7
ADR 0267 (proposed): an artifact is rebuilt only when its build source changes
jochen2026-10-08 23:05:51 +02:00
d0be529194
Merge pull request 'Issue 337: the store's reader can read the controller's signing key (critical)' (#230) from issues/337-the-stores-reader-can-read-the-controllers-signing-key into main
mesh-admin2026-10-08 20:16:30 +00:00
7f78016f07
Issue 337: say that only what is gone is reported revoked, and that a grant the reader passed on is taken back with CASCADE
jochen2026-10-08 22:11:16 +02:00
b17839a7db
Issue 337 after review: say control-node, drop the store's operational settings, and match the fix's revoke-by-grantor and read-back
jochen2026-10-08 22:02:30 +02:00
7ade322bcb
Register issue 338: a module built from a shared repository moves on every merge to it
jochen2026-10-08 21:59:18 +02:00
4955a663d3
Merge pull request 'Issue 335: a build that passed its gate was failed and put back by the first machine's later reports' (#227) from issues/335-a-passed-gate-was-failed-by-later-reports into main
mesh-admin2026-10-08 19:51:27 +00:00
bbbaf943e8
Issue 335: resolved by mesh-controller#165 (8170fc5) with replay R335
jochen2026-10-08 21:49:00 +02:00
6c297214ad
Issue 337: the store's reader could read the controller's signing key and every secret the store holds
jochen2026-10-08 21:46:01 +02:00
a1c85c6de5
Merge pull request 'Design 52: until it is adopted, the workstation's fstab line still mounts at boot (review follow-up)' (#229) from fix/shares-review-followups into main
mesh-admin2026-10-08 19:37:03 +00:00
ebffbaa17e
Merge pull request 'ADR 0264 and issue 330: a message a consumer gives up on is kept until a person delivers it again or drops it' (#223) from fix/330-a-message-given-up-on-is-kept into main
mesh-admin2026-10-08 19:26:57 +00:00
4dd52cace6
Design 52: say the workstation's fstab line still mounts at boot until it is adopted, and can hold the boot 30 s
jochen2026-10-08 21:14:34 +02:00
6fdaeb79ba
Issue 334 and ADR 0264: an ask a seat gave up on can only be dropped for now
jochen2026-10-08 18:38:54 +02:00
b0986e2ae0
Issue 330: name the installer's user list among its fixes
jochen2026-10-08 17:56:37 +02:00
d1e0e121d6
ADR 0264 and issue 330: keep what a consumer gives up on until a person acts
jochen2026-10-08 17:37:49 +02:00
e6f0e7e359
Issue 336: a send held for the bus's planned step raises no condition, so the operator is never asked
jochen2026-10-08 20:58:44 +02:00
f346efb938
Issue 335: leave fixed-by for the merge, and call the put-back refusal a guard
jochen2026-10-08 20:49:40 +02:00
4eb8be9e66
Merge pull request 'ADR 0263 (accepted), research 038, design 52: a share is a provision, a node mounts it on demand' (#221) from feat/mounts-module into main
mesh-admin2026-10-08 18:39:59 +00:00
b409537dbc
Issue 335: a build that passed its gate was failed and put back by the first machine's later reports
jochen2026-10-08 20:27:36 +02:00
d05c9d7ca4
Name the safe order of taking shares into use without the retired word
jochen2026-10-08 20:22:05 +02:00
bffd0f90d0
ADR 0263 and design 52 after review: what each export promises, per-node grants, refusals, not-built checks, and a read-only-first rollout
jochen2026-10-08 20:21:48 +02:00
0811b21be1
Merge pull request 'ADR 0265 and issue 327: a verb that reads is answered on the serving controller's own connection, and every connection says what it is' (#224) from fix/327-a-verb-reads-on-the-serving-connection into main
mesh-admin2026-10-08 18:21:28 +00:00
0a38d9b21d
ADR 0265: a panicking verb answers, and refused logins are not a reconnect loop
jochen2026-10-08 20:04:19 +02:00
c3a0f7a595
ADR 0265 and issue 327: answer read verbs on the serving connection and name every connection
jochen2026-10-08 17:56:28 +02:00
8665027873
Merge pull request 'ADR 0262: a left-out module's data is backed up as this controller reads it, and an unplaceable line is listed' (#226) from fix/0262-backup-as-read into main
mesh-admin2026-10-08 16:41:31 +00:00
f30b2a3ae0
ADR 0262: note how a left-out module's data is backed up, as the controller now does it
jochen2026-10-08 18:38:09 +02:00
f4b79ba7c2
Design 52 says how the modules were built: the server's bucket carries each share's path, two root processes, settings default to none
jochen2026-10-08 18:37:15 +02:00
34899385ec
Accept ADR 0263 with the operator's choices: one share per folder so backups are never exported, mesh machines only
jochen2026-10-08 18:23:23 +02:00
79bd9911e6
Merge pull request 'ADR 0262: a preference has a default in its manifest, and the operator's own value has none' (#216) from feat/setting-defaults into main
mesh-admin2026-10-08 16:18:53 +00:00
6a9bc3f4b3
ADR 0262: say what a left-out module loses, and how far an entry's unknown key is read
jochen2026-10-08 17:55:38 +02:00
f09c9befdf
ADR 0262: a module with a field the controller does not know is left out and raised, never read silently
jochen2026-10-08 17:34:52 +02:00