# Diagnosis — 2026-09-21

1. The certificate bed already raised the same authority image with no root supplied, and it made
   its own root and issued within a second. The manifest's three minted "secrets" were not needed
   by the authority; they were needed by the consumer, which was handed the root as a served fact.
2. Of the three ways to get a fact made at first start to a consumer, two need a channel from a
   node up to the mesh that does not exist. The third needs nothing new: the provider serves the
   fact at a path, and the consumer fetches it over the mesh network in a gate before it starts.

**Located in:** the two manifests. Decided in
[ADR 0098](../../02-DECISIONS/0098-a-fact-a-provider-makes-at-first-start-is-fetched-from-it.md).