82a6badc7c
Issue 114: land the controller's container-or-process question, renumbered
jochen2026-09-25 16:16:21 +02:00
10a2b706c6
Issue 113: should the controller be a container or a process the host supervises
jschoubben2026-09-24 11:41:55 +02:00
35db2aaa41
Issue 117: a module's own code is a container in one record and a process in another
jochen2026-09-25 16:15:00 +02:00
56669ee23b
Merge pull request 'Issue 116: route-proxy has no authentication or IP-restriction mechanism' (#109) from issue/116-route-proxy-has-no-auth-or-ip-restriction into main
jschoubben2026-09-25 12:28:50 +00:00
367df38e6d
Issue 116: resolved by mesh-controller PR #58jochen2026-09-25 14:25:24 +02:00
a11da86591
ADR 0108: a route carries the policy applied to a request
jochen2026-09-25 13:48:18 +02:00
c839d9ac26
Issue 116: scrub the disclosure, and correct the count and the shape of the gap
jochen2026-09-25 13:24:34 +02:00
226d556743
Issue 116: route-proxy has no authentication or IP-restriction mechanism
jschoubben2026-09-25 11:51:56 +02:00
ab7d216fc6
Issue 113 resolved by the repin, and what issue 064 did not cover
jochen2026-09-25 00:55:13 +02:00
cdcd4da27e
Merge pull request 'Research 015: reopen the comparison — the premise for narrowing to one candidate was false' (#105) from storage/015-reopen-the-candidate-comparison into main
jschoubben2026-09-24 16:47:18 +00:00
1d524a1fa8
Research 015: rewrite the comparison — wrong axis, and a missing candidate
jochen2026-09-24 18:46:47 +02:00
999636e2a8
Issue 113: retract the diagnosis table — the original report was right
jochen2026-09-24 18:46:47 +02:00
48abc36b5b
Merge remote-tracking branch 'origin/main' into work/object-store-records
jochen2026-09-24 18:41:53 +02:00
2c5f805467
Merge pull request 'Add hq-defer: park a thought without moving the work off course' (#107) from meta/hq-defer-skill into main
jschoubben2026-09-24 16:39:22 +00:00
db2c950ba6
hq-defer: make the MEMORY.md pointer an explicit placeholder
jochen2026-09-24 18:38:43 +02:00
971d0839f5
Add hq-defer: park a thought without moving the work off course
jochen2026-09-24 16:40:24 +02:00
5677e97508
Merge pull request 'ADR 0107: persistent data is a directory bind, never a named volume' (#106) from decide/0107-persistent-data-is-a-directory-bind into main
jschoubben2026-09-24 14:24:17 +00:00
a93743708c
ADR 0107: persistent data is a directory bind, never a named volume
jschoubben2026-09-24 16:21:51 +02:00
c8cbbcfb8a
Research 015: reopen the comparison — the premise for narrowing to one candidate was false
jochen2026-09-24 16:10:33 +02:00
a458f751c6
Merge pull request 'Accept ADR 0038; close issue 091' (#104) from issue/091-ports-are-mesh-assigned-not-manifest-fixed into main
jschoubben2026-09-24 13:53:36 +00:00
402b798ab6
Accept ADR 0038; close issue 091
jschoubben2026-09-24 15:52:45 +02:00
f10dce4f9e
Merge pull request 'Issue 113 and research 015: the object store's images are gone upstream, not access-restricted' (#103) from storage/113-the-object-store-lost-its-upstream into main
jschoubben2026-09-24 13:45:34 +00:00
4beb6629db
Issue 113: ground the rebuildability point in what the design actually says
jochen2026-09-24 15:44:44 +02:00
d497b37e43
Issue 113 and research 015: the object store's images are gone upstream, not access-restricted
jochen2026-09-24 15:27:03 +02:00
183b22997c
Merge pull request 'Issue 112: diagnose — the predecessor's own DNS config already names the carried peers' (#101) from issue/112-diagnosis into main
jschoubben2026-09-24 12:49:50 +00:00
8d67cf63c5
Issue 112: status located, not diagnosing
jschoubben2026-09-24 14:27:25 +02:00
6abfec7433
Design 25: address first review's four findings before any code
jschoubben2026-09-24 13:53:53 +02:00
6a56738d7b
Issue 112: diagnose — the predecessor's own DNS config already names the carried peers
jschoubben2026-09-24 13:25:44 +02:00
91a5c63d65
Merge pull request 'Name the migration repository in the map, so nobody has to be told it exists' (#99) from meta/name-the-migration-repository into main
jschoubben2026-09-24 00:02:07 +00:00
545d038198
Name the migration repository in the map, so nobody has to be told it exists
jschoubben2026-09-24 02:01:41 +02:00
7f438d049f
Merge pull request 'Issue 092: genesis publishes to a registry the container runtime does not yet trust' (#79) from issue/092-genesis-registry-trust into main
jschoubben2026-09-23 23:38:46 +00:00
60e43f9446
Merge pull request 'Issue 091: a module definition carries a machine port' (#78) from issue/091-machine-ports-in-manifests into main
jschoubben2026-09-23 23:38:40 +00:00
36aa722c2a
Merge pull request 'Issues 111 and 112: the resolver was told the wrong set of names, twice over' (#98) from issues/111-112-the-resolver-was-told-the-wrong-names into main
jschoubben2026-09-23 23:32:42 +00:00
f704e2ca64
Issues 111 and 112: the resolver was told the wrong set of names, twice over
jschoubben2026-09-24 01:32:04 +02:00
e7a90be3ee
Merge pull request 'Issue 110: on a converged node a container on the runtime's own network cannot reach the resolver' (#97) from issues/110-the-resolver-and-the-default-network into main
jschoubben2026-09-23 23:13:48 +00:00
3a8515273d
Issue 110: on a converged node a container on the runtime's own network cannot reach the resolver
jschoubben2026-09-24 01:13:30 +02:00
0e70ca0808
Merge pull request 'Issue 109: a container keeps the address it was made with' (#96) from issues/109-a-container-keeps-the-address-it-was-made-with into main
jschoubben2026-09-23 23:02:48 +00:00
6ccd138729
Issue 109: a container keeps the address it was made with
jschoubben2026-09-24 01:02:16 +02:00
07ee79199a
Merge pull request 'ADR 0105: what review settled — the tunnel adoption is implemented' (#95) from decide/0105-implemented into main
jschoubben2026-09-23 22:39:08 +00:00
f660620637
ADR 0105: what review settled — carried peers, the flip, the refusals, and keeping the hub's identity
jschoubben2026-09-24 00:38:54 +02:00
f61f047a5d
Merge pull request 'Issue 102 resolved and verified on the machine; issue 097's orphan was on the host network' (#94) from issues/102-resolved-and-097-worse into main
jschoubben2026-09-23 22:15:49 +00:00
133e10a738
Issue 102 resolved, verified on the machine with both forwarders gone; 097's orphan was on the host network
jschoubben2026-09-24 00:02:13 +02:00
0c433d51ad
Design 25: the bus on NATS — subjects, streams, accounts as configuration, enrolment, a person's client, the cutover, the beds
jschoubben2026-09-23 23:42:42 +02:00
c209a575e1
Merge pull request 'ADR 0106: the bus is NATS; issue 104 resolved' (#92) from decide/0106-the-bus-is-nats into main
jschoubben2026-09-23 21:40:03 +00:00
e022798858
ADR 0106: the bus is NATS — native, built beside the migration, cut over after its core; issue 104 resolved
jschoubben2026-09-23 23:39:17 +02:00
6f173a7912
Merge pull request 'Issue 108: the registry has no garbage collection, and two doors make it harder to add' (#91) from issues/108-registry-gc into main
jschoubben2026-09-23 21:32:52 +00:00
73091dcb4c
Issue 108: the registry has no garbage collection, and two doors make it harder to add
jschoubben2026-09-23 23:32:29 +02:00
f6ec64ee4e
Merge pull request 'Issue 107: a declaration carries no order; rescue on an enrolled node is reconcile, not apply FILE' (#90) from issues/107-declarations-carry-no-order into main
jschoubben2026-09-23 21:27:24 +00:00
671c2f3881
Issue 107: a declaration carries no order; rescue on an enrolled node is reconcile, not apply FILE
jschoubben2026-09-23 23:27:08 +02:00
2445d80565
Merge pull request 'Research 014: the bus on NATS — decide now, build in the lab, cut over once after the core' (#89) from research/014-nats into main
jschoubben2026-09-23 21:15:22 +00:00
a548b34f5d
Research 014: fix the reference to ADR 0039
jschoubben2026-09-23 23:14:57 +02:00
b59907ee08
Research 014: the bus on NATS — decide now, build in the lab, cut over once after the core
jschoubben2026-09-23 23:14:39 +02:00
8638ba3a4f
Merge pull request 'Issues 102–106 and ADR 0105: what the core migration found, and the hub adopting the predecessor's tunnel' (#88) from core/issues-102-106-and-tunnel-adr into main
jschoubben2026-09-23 20:54:53 +00:00
cb2117f1c4
Issues 102–106 and ADR 0105 from the core migration
jschoubben2026-09-23 22:50:10 +02:00
ee2bdf220c
Merge pull request 'Issue 101: taking a service its neighbours reach by container name cuts them off' (#87) from issues/101-a-service-reached-by-name-loses-its-network into main
jschoubben2026-09-23 18:14:08 +00:00
61e4e971a4
Issue 101: taking a service reached by container name cuts its neighbours off
jschoubben2026-09-23 20:13:53 +02:00
f4f58e7c30
Merge pull request 'Issue 100: a secret the mesh mints cannot be the one the service it takes over already uses' (#86) from issues/100-a-minted-secret-cannot-be-the-one-the-service-already-uses into main
jschoubben2026-09-23 00:54:21 +00:00
157c6edd50
Issue 100: a minted secret cannot be the one the service already uses
jschoubben2026-09-23 02:54:09 +02:00
e9e5df36bd
Merge pull request 'Issue 099: a module's image pin ages into a downgrade, and taking it over is where that is discovered' (#85) from issues/099-a-pin-ages-into-a-downgrade into main
jschoubben2026-09-23 00:48:02 +00:00
9faa985be3
Issue 099: a module's image pin ages into a downgrade
jschoubben2026-09-23 02:47:50 +02:00
cda7a4e348
Merge pull request 'Issue 094 diagnosed and resolved; 096, 097 and 098 opened from what it uncovered' (#84) from issues/094-diagnosis-and-096 into main
jschoubben2026-09-23 00:37:27 +00:00
668ce3ad62
Issue 094 resolved: a given port names either end and is answered once
jschoubben2026-09-23 02:37:07 +02:00
0c8615aa8f
Issue 098: taking a module replaces a configuration nobody compared
jschoubben2026-09-23 02:23:58 +02:00
235b9ea0e5
Issues 096 and 097, and 094 diagnosed: a setting stored where it cannot work, and a resource that changed target
jschoubben2026-09-23 02:20:48 +02:00
1b8e5043ee
Merge pull request 'Issues 094 and 095, both found in the first module's cutover' (#83) from issues/094-095-from-the-first-cutover into main
jschoubben2026-09-22 23:57:48 +00:00
515cb8adc1
Issues 094 and 095, both found in the first module's cutover
jschoubben2026-09-23 01:57:10 +02:00
0d8b683ad7
Merge pull request 'Research 013: the forge and the registries — a seat answers the wrong question' (#82) from research/013-the-forge-and-the-registries into main
jschoubben2026-09-23 01:03:10 +02:00
43b55d6664
Research 013: the forge and the registries — a seat answers the wrong question; issues 090 and 085 corrected from the code
jschoubben2026-09-23 00:38:34 +02:00
6c81ea2204
Merge pull request 'ADR 0104: a provision may be answered by an adapter to the predecessor' (#81) from decide/0104-route-adapter into main
jschoubben2026-09-22 23:57:54 +02:00
a23ede495e
ADR 0104: a provision may be answered by an adapter to the predecessor; issue 093 located; connectivity says how the proxy hands over
jschoubben2026-09-22 23:57:38 +02:00
a2323ade2e
Merge pull request 'Issue 093: the successor proxy cannot serve what the predecessor still serves' (#80) from issue/093-proxy-handover into main
jschoubben2026-09-22 23:57:04 +02:00
d697c6f776
Issue 093: the successor proxy cannot serve what the predecessor still serves, so no web module can migrate one at a time
jschoubben2026-09-22 23:45:49 +02:00
a7b3f7823b
Issue 092: it happened twice more — the registry's mesh name, and the mesh's own trust naming the default port
jschoubben2026-09-22 23:37:05 +02:00
cc3af29084
Issue 092: genesis publishes to a registry the container runtime does not yet trust
jschoubben2026-09-22 22:43:17 +02:00
fb9d3035d4
Issue 091: a module definition carries a machine port, measured across the catalogue
jschoubben2026-09-22 22:26:14 +02:00
dd81523eab
Merge pull request 'Issue 085 resolved' (#77) from fix/085-resolved into main
jschoubben2026-09-22 22:00:49 +02:00
5c5821b210
Issue 085 resolved: the packages port is a node setting; two of its open questions stay open
jschoubben2026-09-22 22:00:38 +02:00
c46c508c03
Merge pull request 'Issues 088, 089 and 090, found fixing 085' (#76) from fix/issue-085-followups into main
jschoubben2026-09-22 22:00:02 +02:00
1728765fe3
Issues 089 and 090: a contributed route does not follow a moved port; the forge module cannot take over the forge genesis raised
jschoubben2026-09-22 21:54:35 +02:00
e609ccdbfb
Issue 088: the forge's own address names a port it may not have
jschoubben2026-09-22 21:41:58 +02:00
60eae92fb1
Merge pull request 'Adoption mode as built: ADRs 0101–0103, issues 084–086' (#75) from feat/adoption-mode into main
jschoubben2026-09-22 21:02:00 +02:00
7bbbfb158a
ADR 0103: a unit is found when an administrator installed it or the machine uses it
jschoubben2026-09-22 20:02:18 +02:00
87ae893407
Issue 087: the controller cannot tell that a node's host is too old for what it sends
jschoubben2026-09-22 19:43:01 +02:00
c74ea2a4a8
Records say what the build does: 0101 names only measured daemons; 0102 adds to lists and keeps what it writes over; 0103 names every held kind, the found-service rule, conflicting found rules, guards, and what of 0100 it replaces; designs 05, 09 and 17 in step; issue 084's diagnosis in its own file
jschoubben2026-09-22 19:38:16 +02:00
ca1f648973
Issue 086: taking a module narrows a port the predecessor served, without saying so
jschoubben2026-09-22 19:00:59 +02:00
019184ec0f
Issue 085: the packages port given at genesis is not a setting, and a later module can undo it
jschoubben2026-09-22 18:17:21 +02:00
213ab898d6
ADR 0103: what an adopted node holds and what its guard refuses; the node host and connectivity designs name 0102 and 0103
jschoubben2026-09-22 17:52:58 +02:00
84761f0600
ADR 0102: the mesh writes into a shared file, never over it; issue 084 located
jschoubben2026-09-22 17:46:06 +02:00
1901a90d68
ADR 0101 accepted; raising a mesh names it
jschoubben2026-09-22 17:43:13 +02:00
347bbce633
ADR 0101 proposed: a machine's own resolver does not make it in use, as measured on a fresh machine
jschoubben2026-09-22 17:38:44 +02:00
6165a7ae02
Issue 084: taking networking on an adopted node restarts every container, and the held runtime file blocks pulling
jschoubben2026-09-22 17:09:21 +02:00
dfadfd23c0
Merge pull request 'ADR 0100 (proposed): a node in use is adopted before it is converged' (#74) from feat/adoption-mode into main
jschoubben2026-09-22 16:35:32 +02:00
3d4ab23830
ADR 0100: the machine's own traffic is known by its interface, not its source address
jschoubben2026-09-22 16:35:25 +02:00
37252f9c3e
ADR 0100: the guard lets the machine itself through; in use is a non-loopback listener; openings say from where; 09 in step with the flip
jschoubben2026-09-22 16:34:53 +02:00
f3152d827f
ADR 0100 after re-review: the bus and registry stay reachable for enrolment; the mesh guards the store in a table that only refuses; a machine in use defined; the flip refuses while a found container is held; held containers and returning to adopted spelled out
jschoubben2026-09-22 16:32:37 +02:00
02c40bcab4
ADR 0100 after review: found means unrecorded; assigning prepares, taking cuts over; openings through the found firewall on both paths; the mesh guards its own ports; ports kept as node settings; a converged genesis refuses a machine in use; designs 05, 07, 08, 09 and 17 in step
jschoubben2026-09-22 16:28:31 +02:00
111456abb5
ADR 0100 accepted; the node host, connectivity, the node lifecycle and raising a mesh amended for a node adopted before it is converged
jschoubben2026-09-22 16:20:27 +02:00
5fc3cbde4c
Research 012: migrating a node that is in use, measured on the control-node; ADR 0100 proposed — a node in use is adopted before it is converged
jschoubben2026-09-22 16:16:28 +02:00