How-we-build: a bus permission is proven under the real permission (ADR 0560); playbook 07 notes the 2026-10-27 failure #486

Merged

mesh-tools merged 4 commits from pb/seed-lessons-2026-10-27 into main 2026-10-27 21:19:59 +00:00

Conversation 2 Commits 4 Files Changed 3

+21 -1

mesh-tools commented 2026-10-27 19:29:57 +00:00

Member

Copy Link

Copy Source

The 2026-10-27 outage (issues 1126, 1945): a change widened what every node agent watches on the bus; two reviews read its code and its tests ran against a fake bus that grants everything; live, every node's agent was refused that read and stopped composing.

The operator: this is a policy of how we build, not a playbook step. So:

• 00-META/how-we-build.md section 5 gains "A bus permission is proven under the real permission" and its "how it was earned" (how-we-build section 6: record ADR 0560, accepted 2026-10-27; reviewed below; sync by playbook 05 after merge).
• Playbook 07 keeps only the failure note, pointing at the rule; playbooks.html adds the failure and no step.

The earlier rules of this branch (a shadow switch, merge only on a passing check, a local run before review) are dropped, as the operator said.

Reviewed-by: review-486@shanks at 6ef40bbcc7

The 2026-10-27 outage (issues 1126, 1945): a change widened what every node agent watches on the bus; two reviews read its code and its tests ran against a fake bus that grants everything; live, every node's agent was refused that read and stopped composing. The operator: this is a policy of how we build, not a playbook step. So: - 00-META/how-we-build.md section 5 gains "A bus permission is proven under the real permission" and its "how it was earned" (how-we-build section 6: record ADR 0560, accepted 2026-10-27; reviewed below; sync by playbook 05 after merge). - Playbook 07 keeps only the failure note, pointing at the rule; playbooks.html adds the failure and no step. The earlier rules of this branch (a shadow switch, merge only on a passing check, a local run before review) are dropped, as the operator said. Reviewed-by: review-486@shanks at 6ef40bbcc7d8147930520ef323415ad0250e806a

mesh-tools added 3 commits 2026-10-27 19:29:58 +00:00

Playbook 07: a node-agent change runs under the node's real permissions before review approves, and a pull request whose safety is its check is approved only on its passing verdict (issue 1126, 2026-10-27) 1afab9739e

Playbook 07: keep only the node-agent permission lesson; the operator keeps merging before the check by choice (2026-10-27) 0d1aa93e37

Playbook 07: the developer runs the node-permission test locally as a named exception to step 1 7ff4c7ce68

mesh-tools commented 2026-10-27 19:30:01 +00:00

Author

Member

Copy Link

Copy Source

Delivery novox/hq@6ef40bbcc7d8 — merged since 2026-10-27T21:20:01Z

Source — source.main moved to novox/hq@32da464794. Whether it reached the machines is mesh-delivery-view's, derived from source.main, the wants and the haves.

Transitions

• 2026-10-27 19:49 (new) → proposed (announced): novox/hq#486's head announced
• 2026-10-27 19:49 proposed → ready (accepted): a verdict names this commit and the trunk's head as its trunk commit, the gate passed or warned, and the repository's own check did not fail; or the check gates no merge (check-gates-merge false)
• 2026-10-27 21:20 ready → merged (merged): on the trunk its modules follow: merged there

The commit's note under refs/notes/mesh-plan keeps every transition of this change up to its merge: git log --notes=mesh-plan.

<!-- mesh-delivery:view --> **Delivery** `novox/hq@6ef40bbcc7d8` — **merged** since 2026-10-27T21:20:01Z **Source** — source.main moved to novox/hq@32da46479424. Whether it reached the machines is `mesh-delivery-view`'s, derived from `source.main`, the wants and the haves. **Transitions** - 2026-10-27 19:49 (new) → proposed (announced): novox/hq#486's head announced - 2026-10-27 19:49 proposed → ready (accepted): a verdict names this commit and the trunk's head as its trunk commit, the gate passed or warned, and the repository's own check did not fail; or the check gates no merge (check-gates-merge false) - 2026-10-27 21:20 ready → merged (merged): on the trunk its modules follow: merged there The commit's note under `refs/notes/mesh-plan` keeps every transition of this change up to its merge: `git log --notes=mesh-plan`.

mesh-tools commented 2026-10-27 19:33:16 +00:00

Author

Member

Copy Link

Copy Source

mesh-delivery: not merged. The merge of this pull request into main at 7ff4c7ce68 was declined: the operator, via telegram (user id verified), chose Decline. A new head asks the operator again.

mesh-delivery: **not merged.** The merge of this pull request into main at 7ff4c7ce6888ca96fe0eb1f50951506fbfb279ae was declined: the operator, via telegram (user id verified), chose Decline. A new head asks the operator again.

jschoubben added 1 commit 2026-10-27 19:49:35 +00:00

How-we-build: a bus permission is proven under the real permission (ADR 0560); playbook 07 keeps only the failure note, as the operator asked 6ef40bbcc7

mesh-tools changed title from Playbook 07: a change to what a node agent reads on the bus runs under a node's real permissions before review approves (issue 1126, 2026-10-27) to How-we-build: a bus permission is proven under the real permission (ADR 0560); playbook 07 notes the 2026-10-27 failure 2026-10-27 19:49:47 +00:00

mesh-tools merged commit 32da464794 into main 2026-10-27 21:19:59 +00:00

mesh-tools deleted branch pb/seed-lessons-2026-10-27 2026-10-27 21:19:59 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

mesh/ready

Reviewed and ready: mesh-delivery merges at the marked head once its checks pass (hq ADR 0364)

No labels

Milestone

No items

No Milestone

Assignees

Clear assignees

agent-ace agent-g14 agent-novox agent-shanks jschoubben mesh-tools miel.truyen nox-agent

No Assignees

2 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: novox/hq#486