to-be 29: the account fact and home-scoped resources shipped; the ssh-client module, CA and ~/.ssh boundary did not #279

2026-10-02T09:45:41Z

mesh-admin commented

2026-10-02 09:45:41 +00:00

The controller merged §1, §2 and the composed ssh config on 2026-09-27 (mesh-controller #86) while hq still called the design proposed. This records, from the controller's main branch:

built: the operator account as a node fact (one per node, empty is a real state), path-and-owner placeholders resolving under an account's home, roster rendering carrying each node's account
written but not shipped: the ssh-client catalogue module (branch exists, PR closed on hold)
not built: the SSH CA, known_hosts/authorized_keys, the ~/.ssh found-vs-owned boundary, key adoption, the ssh-agent, user-scoped services
the gap: §1 shipped without a decision record — named as the next thing to write

Also: status → in-progress with code: set; "not urgent" → "now load-bearing" (the migration is complete, these generators are what is left of the predecessor); the real account and node names removed from §1 (public repository); ADR numbers in the prose corrected to match the links after the renumbering.

Checks cycle.py, records.py, index.py pass.

The controller merged §1, §2 and the composed ssh config on 2026-09-27 (mesh-controller #86) while hq still called the design proposed. This records, from the controller's main branch: - built: the operator account as a node fact (one per node, empty is a real state), path-and-owner placeholders resolving under an account's home, roster rendering carrying each node's account - written but not shipped: the `ssh-client` catalogue module (branch exists, PR closed on hold) - not built: the SSH CA, `known_hosts`/`authorized_keys`, the `~/.ssh` found-vs-owned boundary, key adoption, the ssh-agent, user-scoped services - the gap: §1 shipped without a decision record — named as the next thing to write Also: status → in-progress with `code:` set; "not urgent" → "now load-bearing" (the migration is complete, these generators are what is left of the predecessor); the real account and node names removed from §1 (public repository); ADR numbers in the prose corrected to match the links after the renumbering. Checks `cycle.py`, `records.py`, `index.py` pass.

mesh-admin added 1 commit 2026-10-02 09:45:41 +00:00

to-be 29: the account fact and home-scoped resources shipped; the ssh-client module, CA and ~/.ssh boundary did not 8c231102f8

The controller merged §1, §2 and the composed ssh config on 2026-09-27 while hq still
called the design proposed. Record what is on main, what is held on a branch, and what
has no code — and that the account fact shipped without a decision record, which is the
next thing to write. Also drop the real account and node names the public repository must
not carry, and correct ADR numbers that drifted in a renumbering.

mesh-admin merged commit 14adaafa53 into main

2026-10-02 09:49:53 +00:00

mesh-admin deleted branch design/29-what-shipped

2026-10-02 09:49:53 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: novox/hq#279