ADR 0228: a value given by hand lives only until its module's first good start #133

2026-10-06T10:15:46Z

mesh-admin commented

2026-10-06 10:15:46 +00:00

Extends ADR 0113 on the operator's direction (2026-10-06): a given own secret the module reads at start is the mesh's to replace — secret rotate works on it, and a value given through secret accept is replaced on its own after the module's first good start under the mesh. Only a value an outside party issues ("issued-by": "outside"), one the module applies, one the mesh's own code accepted, and one given before this record stay as given.

New: 02-DECISIONS/0228-…
Amended: to-be 13 (new section A value given by hand, decision + code added, updated)
Pointer note on ADR 0113 (The mechanism changed — 2026-10-06, by ADR 0228)
Reading order regenerated

records.py, index.py, cycle.py pass.

Code: novox/mesh-controller and novox/mesh-catalog, same branch name. The controller must ship before the catalogue PR merges (the strict parser refuses issued-by until then).

Extends ADR 0113 on the operator's direction (2026-10-06): a given own secret the module reads at start is the mesh's to replace — `secret rotate` works on it, and a value given through `secret accept` is replaced on its own after the module's first good start under the mesh. Only a value an outside party issues (`"issued-by": "outside"`), one the module applies, one the mesh's own code accepted, and one given before this record stay as given. - New: `02-DECISIONS/0228-…` - Amended: to-be 13 (new section *A value given by hand*, decision + code added, `updated`) - Pointer note on ADR 0113 (*The mechanism changed — 2026-10-06, by ADR 0228*) - Reading order regenerated `records.py`, `index.py`, `cycle.py` pass. Code: novox/mesh-controller and novox/mesh-catalog, same branch name. The controller must ship before the catalogue PR merges (the strict parser refuses `issued-by` until then).

mesh-admin added 1 commit 2026-10-06 10:15:46 +00:00

ADR 0228: a value given by hand lives only until its module's first good start 9c7ec6ba75

The controller read 0113 as refusing to replace any value given to it, so
two leaked secrets only their own modules read could not be rotated without
a person handling a new value. Amends to-be 13 and points 0113 at it.

mesh-admin merged commit c99eb82e0e into main

2026-10-06 10:16:30 +00:00

mesh-admin deleted branch feat/a-given-secret-lives-until-the-first-good-start

2026-10-06 10:16:30 +00:00

mesh-admin commented

2026-10-06 23:07:57 +00:00

Delivery novox/hq@c99eb82e0e26 — held since 2026-10-06T23:05:28Z

Held for a person: merged without a passing check: only a person decides that it goes on — mesh-delivery.release with why lets it go on.

Delivery plan — builds nothing: the change touches no module of the mesh's graph

Transitions

2026-10-06 23:05 (new) → proposed (announced): novox/hq#133 merged; its head was not heard by this owner, so it is made from the forge's word
2026-10-06 23:05 proposed → held (merged-unchecked): merged without a passing check — a verdict known with it is taken first: only a person decides that it goes on

The commit's note under refs/notes/mesh-plan keeps every transition: git log --notes=mesh-plan.

**Delivery** `novox/hq@c99eb82e0e26` — **held** since 2026-10-06T23:05:28Z Held for a person: merged without a passing check: only a person decides that it goes on — `mesh-delivery.release` with why lets it go on. **Delivery plan** — builds nothing: the change touches no module of the mesh's graph **Transitions** - 2026-10-06 23:05 (new) → proposed (announced): novox/hq#133 merged; its head was not heard by this owner, so it is made from the forge's word - 2026-10-06 23:05 proposed → held (merged-unchecked): merged without a passing check — a verdict known with it is taken first: only a person decides that it goes on The commit's note under `refs/notes/mesh-plan` keeps every transition: `git log --notes=mesh-plan`.

mesh-admin referenced this pull request

2026-10-08 08:21:56 +00:00

Issue 306: a check on the control node ran past its timeout #191

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: novox/hq#133