Commit Graph

Select branches

Hide Pull Requests

agents/seams-reads-per-process

design/36-items-the-mesh-did-not-place

design/42-zfs-answers-2

design/47-G-lead-answers-3

design/47-G-lead-answers-31

design/47-G-lead-answers-5

design/47-build-seats-yield

design/47-the-check-in-r4

docs/774-try-seat

docs/acceptance-criteria-milestone-5b

main

pb-cleanup-after-delivery

pb/group-pin-lessons-2026-10-29

pb/group-pin-lessons-2026-10-29-r

pb/packages-always-latest

pb/reproduce-the-checker

test/ssh-proof-g14

#1

#10

#100

#101

#102

#103

#104

#105

#106

#107

#108

#109

#11

#110

#111

#112

#113

#114

#115

#116

#117

#118

#119

#12

#120

#121

#122

#123

#124

#125

#126

#127

#128

#129

#13

#130

#131

#132

#133

#134

#135

#136

#137

#138

#139

#14

#140

#141

#142

#143

#144

#145

#146

#147

#148

#149

#15

#150

#151

#152

#153

#154

#155

#156

#157

#158

#159

#16

#160

#161

#162

#163

#164

#165

#166

#167

#168

#169

#17

#170

#171

#172

#173

#174

#175

#176

#177

#178

#179

#18

#180

#181

#182

#183

#184

#185

#186

#187

#188

#189

#19

#190

#191

#192

#193

#194

#195

#196

#197

#198

#199

#2

#20

#200

#201

#202

#203

#204

#205

#206

#207

#208

#209

#21

#210

#211

#212

#213

#214

#215

#216

#217

#218

#219

#22

#220

#221

#222

#223

#224

#225

#226

#227

#228

#229

#23

#230

#231

#232

#233

#234

#235

#236

#237

#238

#239

#24

#240

#241

#242

#243

#244

#245

#246

#247

#248

#249

#25

#250

#251

#252

#253

#254

#255

#256

#257

#258

#259

#26

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#27

#270

#271

#272

#273

#274

#275

#276

#277

#278

#279

#28

#280

#281

#282

#283

#284

#285

#286

#287

#288

#289

#29

#290

#291

#292

#293

#294

#295

#296

#297

#298

#299

#3

#30

#300

#301

#302

#303

#304

#305

#306

#307

#308

#309

#31

#310

#311

#312

#313

#314

#315

#316

#317

#318

#319

#32

#320

#321

#322

#323

#324

#325

#326

#327

#328

#329

#33

#330

#331

#332

#333

#334

#335

#336

#337

#338

#339

#34

#340

#341

#342

#343

#344

#345

#346

#347

#348

#349

#35

#350

#351

#352

#353

#354

#355

#356

#357

#358

#359

#36

#360

#361

#362

#363

#364

#365

#366

#367

#368

#369

#37

#370

#371

#372

#373

#374

#375

#376

#377

#378

#379

#38

#380

#381

#382

#383

#384

#385

#386

#387

#388

#389

#39

#390

#391

#392

#393

#394

#395

#396

#397

#398

#399

#4

#40

#400

#401

#402

#403

#404

#405

#406

#407

#408

#409

#41

#410

#411

#412

#413

#414

#415

#416

#417

#418

#419

#42

#420

#421

#422

#423

#424

#425

#426

#427

#428

#429

#43

#430

#431

#432

#433

#434

#435

#436

#437

#438

#439

#44

#440

#441

#442

#443

#444

#445

#446

#447

#448

#449

#45

#450

#451

#452

#453

#454

#455

#456

#457

#458

#459

#46

#460

#461

#462

#463

#464

#465

#466

#467

#468

#469

#47

#470

#471

#472

#473

#474

#475

#476

#477

#478

#479

#48

#480

#481

#482

#483

#484

#485

#486

#487

#488

#489

#49

#490

#491

#492

#493

#494

#495

#496

#497

#498

#499

#5

#50

#500

#501

#502

#503

#504

#505

#506

#507

#508

#509

#51

#510

#511

#512

#513

#514

#515

#516

#517

#518

#519

#52

#520

#521

#522

#523

#524

#525

#526

#527

#528

#529

#53

#530

#531

#532

#533

#534

#535

#536

#537

#538

#539

#54

#540

#541

#542

#543

#544

#545

#546

#547

#548

#549

#55

#550

#551

#552

#553

#554

#555

#556

#557

#558

#559

#56

#560

#561

#562

#563

#564

#565

#566

#567

#568

#569

#57

#570

#571

#572

#573

#574

#575

#576

#577

#578

#579

#58

#580

#581

#582

#583

#584

#585

#586

#587

#588

#589

#59

#590

#591

#592

#593

#594

#595

#596

#597

#598

#599

#6

#60

#600

#601

#602

#603

#604

#605

#606

#607

#608

#609

#61

#610

#62

#63

#64

#65

#66

#67

#68

#69

#7

#70

#71

#72

#73

#74

#75

#76

#77

#78

#79

#8

#80

#81

#82

#83

#84

#85

#86

#87

#88

#89

#9

#90

#91

#92

#93

#94

#95

#96

#97

#98

#99

archive/initialization-consolidation

Mono Color

• e2afb3e144 ADR 0056 + connectivity: public routing is name-agnostic, resolved in-mesh, internally certifiable jschoubben 2026-09-09 22:24:43 +02:00
• 450a4d8605 Merge pull request 'ADR 0055 — model access is answered by a licence or a node that hosts the model' (#31) from feat/adr-0055-node-model into main jschoubben 2026-09-07 04:39:25 +02:00
• 9dfa5ba2ac ADR 0055 — model access is answered by a licence or a node that hosts the model jschoubben 2026-09-07 04:39:10 +02:00
• b7a33a1e26 Merge pull request 'ADR 0054 — model usage is a vendor-neutral record at two grains' (#29) from feat/adr-0054-model-usage into main jschoubben 2026-09-06 23:39:11 +02:00
• ec2d73bc06 ADR 0054 — model usage is a vendor-neutral record at two grains (licence + session) jschoubben 2026-09-06 23:38:54 +02:00
• a361c86c3c Merge pull request 'ADR 0053 — a scheduled step is a container run on a recurring schedule' (#28) from feat/adr-0053-scheduled-task into main jschoubben 2026-09-06 13:53:11 +02:00
• 12a311ba4c ADR 0053 — a scheduled step is a container run on a recurring schedule jschoubben 2026-09-06 13:52:55 +02:00
• 897626a9f6 Merge pull request 'ADR 0052 — a step that runs once before a container (issue 037 / run-once primitive)' (#27) from feat/adr-0052-run-once-lifecycle into main jschoubben 2026-09-06 00:05:04 +02:00
• a3b0e68ec5 Accept ADR 0052 — a step that runs once before a container jschoubben 2026-09-06 00:04:21 +02:00
• 2405d72fb0 ADR 0052 (proposed) — an init step is a container run once to completion jschoubben 2026-09-05 23:52:26 +02:00
• c41deb55d2 Merge pull request 'ADR 0051 — shared data is the operator's; a module is granted access (fixes issue 036)' (#26) from feat/adr-0051-shared-data-operator-owned into main jschoubben 2026-09-05 22:29:44 +02:00
• d5e12c82aa Accept ADR 0051 — shared data is the operator's; a module is granted access jschoubben 2026-09-05 22:29:24 +02:00
• 220e3c72f5 ADR 0051 (proposed) — shared data is the operator's jschoubben 2026-09-05 22:22:30 +02:00
• 4430cc1748 Merge pull request 'ADR 0050 (proposed) — model access is vendor-agnostic [awaiting ratification]' (#25) from feat/adr-0050-vendor-agnostic-model-access into main jschoubben 2026-09-05 21:42:28 +02:00
• 860d512e91 Accept ADR 0050 — model access is vendor-agnostic jschoubben 2026-09-05 21:42:20 +02:00
• 3a9b47918d ADR 0050 (proposed) — model access is vendor-agnostic; amend 14-model-access jschoubben 2026-09-05 13:43:01 +02:00
• 3b0aff7585 Merge pull request 'Reconcile: adopt initialization's consolidated HQ as canonical, re-home this session's new work' (#24) from reconcile-init-into-main into main jschoubben 2026-09-05 12:27:11 +02:00
• 495db6dc89 Restore initialization's issue 003 — the status flip was based on a wrong premise jschoubben 2026-09-05 12:26:23 +02:00
• e269f9a185 Re-home this session's new ADRs (0039-0049) and issues (032-037) onto the consolidated scheme; flip issue 003; port repos.md sdk line + feature-branches playbook (07); regenerate index jschoubben 2026-09-05 12:24:07 +02:00
• 546caa31c4 Merge initialization into main — adopt its consolidated structure as canonical jschoubben 2026-09-05 11:59:01 +02:00
• db8be15a15 Merge pull request 'Issue 013 — a module cannot run its own code at a lifecycle phase' (#23) from feat/hq-issue-013 into main jschoubben 2026-09-05 11:16:27 +02:00
• 9c8c4a3ee5 Issue 013 — a module cannot run its own code at a lifecycle phase jschoubben 2026-09-05 11:15:53 +02:00
• 600a57aafb Merge pull request 'Issues 011 and 012 — what the manifest review could not fix' (#12) from issues/manifest-review into main jschoubben 2026-09-05 03:52:32 +02:00
• 2c8616b650 Renumber manifest-review issues 008/009 -> 011/012 jschoubben 2026-09-05 03:52:02 +02:00
• 69fa79c585 Merge pull request 'Playbook 06 — one feature, one branch, one MR per repo' (#22) from feat/feature-branch-workflow into main jschoubben 2026-09-05 03:47:25 +02:00
• cabe873503 Playbook 06 — one feature, one branch, one MR per repo jschoubben 2026-09-05 03:40:39 +02:00
• 36936dc7a3 Merge pull request 'Issue 009 (fixed) + Issue 008 (resolved via ADR 0053) — module-runtime config & provider contract' (#21) from worktree-issue-provider-seal-key into main jschoubben 2026-09-05 03:02:34 +02:00
• bfa08742f8 Consolidate hq: ADRs 0044-0052 merged in, and 0017/0049-0052 accepted jschoubben 2026-09-05 03:01:06 +02:00
• b5a74178c3 Merge remote-tracking branches 'origin/design/adr-0044-sdk-boundary', 'origin/design/adr-0045-what-a-module-is', 'origin/design/adr-0046-events', 'origin/design/adr-0047-event-wire-shape', 'origin/worktree-adr-0048-module-broker-account', 'origin/worktree-adr-reachability-dns-firewall', 'origin/worktree-adr-config-is-the-assignments' and 'origin/worktree-adr-module-runtime' into worktree-issue-provider-seal-key jschoubben 2026-09-05 03:00:24 +02:00
• 1a83ed28fa Merge pull request '011: measure the graph against every facet a module carries' (#11) from research/011-facet-coverage into main jschoubben 2026-09-05 02:53:20 +02:00
• 984194e765 Accept ADR 0054 (slug) and resolve issue 010 jschoubben 2026-09-05 02:52:03 +02:00
• af5c939d16 ADR 0054: add option E (a declared slug) and recommend it over A+B jschoubben 2026-09-05 02:30:11 +02:00
• 89b65dd4c0 ADR 0054 (proposed) — a consumer's identity is bounded by the tightest backend jschoubben 2026-09-05 02:17:46 +02:00
• 75887d0bc5 Issue 010 — the mesh's derived login does not fit every backend's identity rules jschoubben 2026-09-05 01:58:11 +02:00
• e5f4af8cf2 Accept ADR 0053 and resolve issue 008 — provider contract implemented and proven jschoubben 2026-09-05 00:27:56 +02:00
• e27f8b1b7d ADR 0053 (proposed) — a provider creates the credential the mesh minted, and seals nothing jschoubben 2026-09-05 00:06:50 +02:00
• 332c334767 Issue 008 — sharpen: the provisioner's seal model is orphaned, not just undelivered jschoubben 2026-09-04 23:40:20 +02:00
• 47b0ca5c90 Issue 009 — settings change does not restart a container-hosted runtime jschoubben 2026-09-04 23:06:48 +02:00
• d1aa4254c9 Issue 008 — a provider runtime has no seal key the mesh can deliver jschoubben 2026-09-04 22:23:24 +02:00
• f63eca13b3 ADR 0052 — a module runs its code as its own process, with its own account jschoubben 2026-09-04 21:24:46 +02:00
• e898a3ec44 ADR 0051 — a module's configuration is its assignment's, not its manifest jschoubben 2026-09-04 21:05:55 +02:00
• 9eb5576682 04-ISSUES/003 — fixed: the firewall scope is enforced now jschoubben 2026-09-04 20:56:44 +02:00
• 5118258ee3 ADR 0049 and 0050 — public DNS and the firewall, two reachability decisions jschoubben 2026-09-04 20:45:58 +02:00
• cfa3ad1930 ADR 0048 — ratified: status accepted jschoubben 2026-09-04 01:22:47 +02:00
• b622de4fe6 ADR 0048 — a module's broker account is scoped by its emits and consumes jschoubben 2026-09-04 01:19:15 +02:00
• 820ce8fc8c ADR 0047 — the shape of an event on the wire jschoubben 2026-09-03 23:47:58 +02:00
• 4bb6dd26ed ADR 0046 — events are a relationship, provisioning's lighter sibling jschoubben 2026-09-03 23:42:25 +02:00
• b2cb481681 ADR 0045 — what a module is jschoubben 2026-09-03 22:50:52 +02:00
• 50d61398b6 ADR 0044 — what the SDK holds, and what it refuses jschoubben 2026-09-03 21:41:08 +02:00
• 7b4a664c50 Issues 008 and 009 — what the manifest review could not fix jschoubben 2026-09-02 01:07:05 +02:00
• 9638aa02c5 031 — a machine becomes each thing it was told, in turn jschoubben 2026-09-02 01:06:12 +02:00
• b245f5e254 011: measure the graph against every facet a module carries jschoubben 2026-09-01 23:14:03 +02:00
• 6bdd3f2bfa 030 — asking what a machine should be re-signed its certificate jschoubben 2026-09-01 22:28:26 +02:00
• 6385d52bc0 029 fixed — the store is added, not built, and the cycle is refused jschoubben 2026-09-01 21:43:42 +02:00
• 013dbce4a9 029 — the artifact store cannot be delivered by the artifact store jschoubben 2026-09-01 21:15:05 +02:00
• e75683c01f 026 reopened — the rule is right about data, wrong about facilities jschoubben 2026-09-01 19:45:55 +02:00
• bd8f09d647 026 fixed — and the coincidence turned into a rule jschoubben 2026-09-01 19:36:15 +02:00
• 0bcfeb4e80 028 fixed — the mesh assigns the port, and knows what it cannot move jschoubben 2026-09-01 18:32:58 +02:00
• c2a37ab7f8 38 — the mesh assigns the port, and a module does not care jschoubben 2026-09-01 17:42:27 +02:00
• 6330abce5f 028 — two things want one port, and nothing says so until the machine jschoubben 2026-09-01 17:21:31 +02:00
• 03266fd4a2 027 — a container cannot follow a file, and a rotated credential is the case jschoubben 2026-09-01 17:19:43 +02:00
• 3f00d3b413 026 filed; 025 corrected; the image store is a module jschoubben 2026-09-01 16:10:13 +02:00
• befbb1d978 The five modules could not have run, and now the forge does jschoubben 2026-09-01 15:40:52 +02:00
• 2bbdc52440 025 — half done: nothing unrunnable reaches a machine now jschoubben 2026-09-01 15:13:52 +02:00
• fc7717f6b1 021 closed — the record was left open after the fix landed jschoubben 2026-09-01 15:04:36 +02:00
• 0871e6ec11 37 — where a module lives, proposed jschoubben 2026-09-01 14:24:53 +02:00
• f6b1834ea9 024 fixed — the registry was addressed by hand and nothing else was jschoubben 2026-09-01 09:53:08 +02:00
• 407416e6d0 024 — a run stalls before the host is placed, and says nothing while it does jschoubben 2026-09-01 03:20:40 +02:00
• 39916b26e9 What stands between 3.1 and a running identity provider is a program jschoubben 2026-09-01 03:13:11 +02:00
• 0760280bc6 The largest gap in the coverage list is not a gap jschoubben 2026-09-01 03:09:11 +02:00
• f583502fc9 023 fixed — the mesh says who a consumer is, and what it is bound to jschoubben 2026-09-01 03:05:43 +02:00
• 4adc656b54 Where Phase 3 actually stands jschoubben 2026-09-01 02:56:54 +02:00
• dea46c3c6c Correct what the coverage document said about actions jschoubben 2026-09-01 02:56:05 +02:00
• 9073d3f2df Say plainly that env-file never points at a sealed secret jschoubben 2026-09-01 02:52:55 +02:00
• 2baf22ac43 A pair is a module and a provider, not two machines jschoubben 2026-09-01 02:46:37 +02:00
• 80f18caf03 022 fixed; 023 filed — a password is not a connection jschoubben 2026-09-01 02:40:40 +02:00
• c86adbe3cc 022 — a credential belongs to a node, so a second consumer refuses jschoubben 2026-09-01 02:28:39 +02:00
• 36d342f176 What a module must be able to say, measured against 127 that exist jschoubben 2026-09-01 02:20:34 +02:00
• 1ee62392b9 Playbook 06 — writing a module, from doing it once jschoubben 2026-09-01 01:46:46 +02:00
• ecfc2c215e Point the plan at the survey, and name the likelier failure jschoubben 2026-08-31 21:46:53 +02:00
• 122405df8e 020: the server version is not it either jschoubben 2026-08-31 21:42:13 +02:00
• acd5a0d80b File 020 — a certificate is issued and never collected; close Phase 1 jschoubben 2026-08-31 21:40:03 +02:00
• f4347e2f14 Correct an overstatement: a sealed secret is readable on its node jschoubben 2026-08-31 21:34:50 +02:00
• b68103d198 A module is adopted with the credentials it already has jschoubben 2026-08-31 21:31:26 +02:00
• f801b4b3e2 The board is published publicly, which decides everything else about it jschoubben 2026-08-31 21:26:06 +02:00
• a1a10e9ed2 Bootstrap ends at a usable mesh, and the first credential comes from a person jschoubben 2026-08-31 21:23:55 +02:00
• 0ef6d3f574 One implementation, several surfaces, and what that costs jschoubben 2026-08-31 21:17:17 +02:00
• fccac61e58 The board is a web application, not a category jschoubben 2026-08-31 21:08:39 +02:00
• 10fa7c76d7 The substrate is a store and a broker jschoubben 2026-08-31 20:30:19 +02:00
• a028337490 The local account owns the mesh; a surface delegates to a module jschoubben 2026-08-31 20:23:42 +02:00
• e3934e4449 The control plane authenticates nobody, so identity is a module jschoubben 2026-08-31 20:18:03 +02:00
• c570c687f6 The handover: switch off the old brain, leave the services running jschoubben 2026-08-31 19:55:35 +02:00
• d1ab2dc0b4 Data outlives the mesh that declared it, and the conversion starts where it lives jschoubben 2026-08-31 19:54:41 +02:00
• 9ad0ec35e0 The conversion is done by hand, and that removes work from this plan jschoubben 2026-08-31 19:46:21 +02:00
• e4327a3a5e Phase 1.3 done: ordering was already there, the network was not jschoubben 2026-08-31 18:55:22 +02:00
• ce486fd5d2 Phase 1.2 done, and it is the same surprise as 1.1 jschoubben 2026-08-31 18:41:19 +02:00
• fdd909ec40 Phase 1.1 done, and it was not the task that was written down jschoubben 2026-08-31 17:53:02 +02:00
• cb1954e7b5 Accept 0024, and rewrite the work breakdown around what is actually being done jschoubben 2026-08-31 17:25:27 +02:00
• 1b5308c9cc Review of the to-be layer: check what the documents claim against what runs jschoubben 2026-08-31 17:20:47 +02:00
• cbcbba8099 A provision names its engine; the substrate supplies only the control plane jschoubben 2026-08-31 17:13:07 +02:00