novox/hq
6
0
Fork 0
Code Issues Pull Requests 6 Releases Wiki Activity
Files
0b1ddaa7e9c582d1be2da61dd7ce1418d8df84d5
hq/04-ISSUES
T
History
jschoubben d222091fe9 Issues 245, 246; 240 resolved, 242 located 
245: a media server's previews were reached through a link its container never mounted — fixed by
mounting them. 246: settings set replaces the whole layer with nothing to read it first and no
history. 240 is fixed by mesh-controller#47; 242 has backups running and records what the rollout
taught.
2026-10-05 14:54:38 +02:00
..
001-failed-package-install-reports-success
Three issues resolved: one closed by evidence, two answered by the replacement
2026-08-31 13:00:03 +02:00
002-stale-package-index-fails-silently
Three issues resolved: one closed by evidence, two answered by the replacement
2026-08-31 13:00:03 +02:00
003-firewall-scope-is-read-by-no-code
Restore initialization's issue 003 — the status flip was based on a wrong premise
2026-09-05 12:26:23 +02:00
004-certificate-issuance-targets-production
004 and 008 resolved; 006 narrowed to the decision it actually needs
2026-08-31 15:20:11 +02:00
005-pipeline-test-harness-unbuildable
005 resolved: a suite that cannot run on every push says when it last ran
2026-08-31 15:02:26 +02:00
006-hq-is-not-indexed-into-the-knowledge-base
Issue 006 resolved: the record is read where it is written, and the console lists it
2026-09-30 18:10:18 +02:00
007-an-installed-package-is-not-a-capability
Issues 007 resolved, 066 located, 064 diagnosed
2026-09-21 17:48:38 +02:00
008-the-documented-node-rescue-does-not-exist
004 and 008 resolved; 006 narrowed to the decision it actually needs
2026-08-31 15:20:11 +02:00
009-a-digest-pinned-image-cannot-be-placed-in-the-lab
An issue is open, diagnosing, located, resolved or wontfix — nothing else
2026-09-21 17:38:17 +02:00
010-the-first-declaration-destroys-the-substrate
An issue is open, diagnosing, located, resolved or wontfix — nothing else
2026-09-21 17:38:17 +02:00
011-one-broken-module-blocks-every-other
An issue is open, diagnosing, located, resolved or wontfix — nothing else
2026-09-21 17:38:17 +02:00
012-a-scenario-machine-is-too-small-for-four-images
Three issues resolved: one closed by evidence, two answered by the replacement
2026-08-31 13:00:03 +02:00
013-a-file-arrives-after-the-service-that-needs-it
The mesh runs its own registry, certifies its own names, and computes its own filtering
2026-08-31 00:37:34 +02:00
014-a-key-that-is-present-and-unusable
A key that is present and unusable, and what the certificate work became
2026-08-31 00:42:13 +02:00
015-a-command-with-no-answer-was-read-as-success
Issue 015: the harness read a swallowed answer as success
2026-08-31 00:48:16 +02:00
016-something-after-the-declaration-was-ignored
Issue 016: anything after the declaration in a file was ignored
2026-08-31 00:51:46 +02:00
017-an-action-succeeded-into-a-state-its-verify-rejects
Issue 017: an action succeeded into a state its own verify rejects
2026-08-31 01:01:17 +02:00
018-a-provider-on-the-same-machine-was-never-announced
Issue 018: a provider on the same machine was never announced to its consumer
2026-08-31 01:35:54 +02:00
019-a-comment-asserting-a-fact-about-a-machine
Issue 019: a comment asserting a fact about a machine, which nothing checked
2026-08-31 14:11:34 +02:00
020-a-certificate-is-issued-and-never-collected
Issue 020 resolved: the symptom was the bed's, proven against Pebble and step-ca alike
2026-09-21 22:12:51 +02:00
021-a-consumer-on-the-providers-machine-is-given-no-credential
An issue is open, diagnosing, located, resolved or wontfix — nothing else
2026-09-21 17:38:17 +02:00
022-one-credential-per-node-per-provision-not-per-module
An issue is open, diagnosing, located, resolved or wontfix — nothing else
2026-09-21 17:38:17 +02:00
023-a-consumer-cannot-build-a-connection-string
An issue is open, diagnosing, located, resolved or wontfix — nothing else
2026-09-21 17:38:17 +02:00
024-a-lab-run-stalls-before-the-host-is-placed
An issue is open, diagnosing, located, resolved or wontfix — nothing else
2026-09-21 17:38:17 +02:00
025-a-module-must-pin-a-digest-and-nothing-produces-one
Reconcile the open issues against main
2026-09-21 01:52:53 +02:00
026-the-data-directories-are-not-declared
ADRs 0091 and 0092; issues 026 and 070 resolved; designs 18 and 24 amended
2026-09-21 17:50:41 +02:00
027-a-container-cannot-follow-a-file
Reconcile the open issues against main
2026-09-21 01:52:53 +02:00
028-two-things-want-one-port-and-nothing-says-so
An issue is open, diagnosing, located, resolved or wontfix — nothing else
2026-09-21 17:38:17 +02:00
029-the-artifact-store-cannot-be-delivered-by-the-artifact-store
An issue is open, diagnosing, located, resolved or wontfix — nothing else
2026-09-21 17:38:17 +02:00
030-asking-what-a-machine-should-be-re-signed-its-certificate
An issue is open, diagnosing, located, resolved or wontfix — nothing else
2026-09-21 17:38:17 +02:00
031-a-machine-becomes-each-thing-it-was-told-in-turn
Issues 031, 035 and 054 name their merges, the branch being gone
2026-09-21 13:49:56 +02:00
032-provider-runtime-has-no-seal-key
Re-home this session's new ADRs (0039-0049) and issues (032-037) onto the consolidated scheme; flip issue 003; port repos.md sdk line + feature-branches playbook (07); regenerate index
2026-09-05 12:24:07 +02:00
033-runtime-config-change-does-not-restart
Nine resolved issues name where their fix landed
2026-09-21 17:39:34 +02:00
034-mesh-login-exceeds-s3-access-key-limit
Re-home this session's new ADRs (0039-0049) and issues (032-037) onto the consolidated scheme; flip issue 003; port repos.md sdk line + feature-branches playbook (07); regenerate index
2026-09-05 12:24:07 +02:00
035-reconciling-a-seed-file-wipes-what-grew-in-it
Nine resolved issues name where their fix landed
2026-09-21 17:39:34 +02:00
036-six-modules-own-what-they-must-share
Reconcile the open issues against main
2026-09-21 01:52:53 +02:00
037-a-module-cannot-run-code-at-a-lifecycle-phase
Reconcile the open issues against main
2026-09-21 01:52:53 +02:00
038-a-provider-is-announced-at-a-name-its-port-is-not-bound-to
Issue 038 resolved — corrected root cause (same-node served-port mismatch, not loopback) + fix reference
2026-09-09 23:06:58 +02:00
039-the-lab-registry-was-silently-pinning-unpinned-modules
Issue 039 resolved — the operator's images are pinned, and why that is a stopgap
2026-09-11 01:06:35 +02:00
040-the-install-procedure-exists-only-as-a-test
Nine resolved issues name where their fix landed
2026-09-21 17:39:34 +02:00
041-a-sealed-credential-ends-up-in-the-process-environment
Issue 041: mongodb names its secrets' owner; the three conversions are proven
2026-09-21 13:47:39 +02:00
042-nothing-gives-a-node-an-account-for-a-registry
042/048/061/062 resolved — the network carries the registry trust
2026-09-18 00:26:50 +02:00
043-a-module-cannot-be-given-the-meshs-own-queues
Nine resolved issues name where their fix landed
2026-09-21 17:39:34 +02:00
044-the-runtime-every-module-builds-on-cannot-be-built-by-the-mesh
A module names its base, so the mesh can act on what it notices
2026-09-13 23:58:06 +02:00
045-a-container-keeps-the-values-it-started-with
Nine resolved issues name where their fix landed
2026-09-21 17:39:34 +02:00
046-an-upstream-image-cannot-be-mirrored-into-the-mesh
ADR 0096: an upstream image is copied between registries; issue 046 resolved; design 18 amended
2026-09-21 20:43:07 +02:00
047-the-firewall-does-not-cover-published-container-ports
Nine resolved issues name where their fix landed
2026-09-21 17:39:34 +02:00
048-nothing-makes-a-machine-trust-the-mesh-registry
042/048/061/062 resolved — the network carries the registry trust
2026-09-18 00:26:50 +02:00
049-a-module-can-serve-tools-and-nothing-can-call-them
ADR 0095: the control plane is the way to ask a module; issue 049 resolved; design 19 amended
2026-09-21 20:38:23 +02:00
050-the-catalogue-knows-nothing-built-before-it
Nine resolved issues name where their fix landed
2026-09-21 17:39:34 +02:00
051-the-mesh-cannot-update-what-it-depends-on
An issue is open, diagnosing, located, resolved or wontfix — nothing else
2026-09-21 17:38:17 +02:00
052-the-firewall-does-not-know-the-brokers-port
Nine resolved issues name where their fix landed
2026-09-21 17:39:34 +02:00
053-the-sdk-is-pinned-twice-and-the-two-disagree
Nine resolved issues name where their fix landed
2026-09-21 17:39:34 +02:00
054-the-adopted-store-and-broker-are-open-before-the-filter
Issue 054 names where its fix landed
2026-09-21 17:39:09 +02:00
055-the-adopted-store-and-broker-may-be-reachable-on-one-node-only
Fix what the records review found
2026-09-17 22:24:57 +02:00
056-an-adopted-module-assigned-to-a-second-node-raises-a-second-server
Fix what the records review found
2026-09-17 22:24:57 +02:00
057-a-cross-node-consumer-is-provisioned-only-when-the-provider-is-pushed-again
057 and 058 resolved — their fixes merged and proven
2026-09-20 12:55:00 +02:00
058-a-provisioner-runtime-crash-loops-until-the-overlay-is-up
057 and 058 resolved — their fixes merged and proven
2026-09-20 12:55:00 +02:00
059-the-broker-credential-names-the-hub-not-the-broker
059 resolved — the broker credential resolves the seat
2026-09-18 01:13:03 +02:00
060-the-mesh-cannot-build-most-of-its-own-catalogue
Issues 060 resolved, 064 opened; 057/058 on this branch too
2026-09-18 02:52:36 +02:00
061-a-module-container-that-names-no-command-runs-the-wrong-thing
042/048/061/062 resolved — the network carries the registry trust
2026-09-18 00:26:50 +02:00
062-a-failed-lookup-composes-the-network-without-the-registry-trust
042/048/061/062 resolved — the network carries the registry trust
2026-09-18 00:26:50 +02:00
063-the-foundation-ports-are-accepted-on-input-but-not-forwarded
Issue 063 — the foundation's ports are forwarded, resolved
2026-09-18 02:20:11 +02:00
064-a-mesh-build-cannot-fetch-a-modules-external-dependencies
Issue 064 resolved: the package half placed by the genesis run, the image half by ADR 0097
2026-09-21 21:52:32 +02:00
065-a-permanently-failing-resource-is-retried-for-ever-with-no-escalation
ADR 0090: a failure that repeats is said to be stuck; issue 065 resolved
2026-09-21 17:43:02 +02:00
066-a-partly-applied-declaration-leaves-a-mixed-state-with-no-rollback
Issue 066 resolved: a file and its reader are guarded by a gate, proven by the coupled-pair spike; design 20 says so
2026-09-21 22:04:14 +02:00
067-a-provision-cannot-name-which-provider-serves-it
Issues 067 and 068 name where their fix landed
2026-09-21 17:38:48 +02:00
068-secrets-have-no-owning-module
An issue is open, diagnosing, located, resolved or wontfix — nothing else
2026-09-21 17:38:17 +02:00
069-one-secret-provision-yields-one-value
ADR 0094: a module may hold several secrets from one provider; issue 069 resolved; design 24 amended
2026-09-21 20:29:29 +02:00
070-an-operator-cannot-deliver-a-pair-credential
ADRs 0091 and 0092; issues 026 and 070 resolved; designs 18 and 24 amended
2026-09-21 17:50:41 +02:00
071-the-foundation-is-raised-with-fixed-credentials
The vault shipped: as-is 06 describes it, design 24 is implemented, 071 names its merges
2026-09-21 10:10:33 +02:00
072-the-controllers-manifest-exists-twice
Issues 072 and 073 name their merges, the branches being gone
2026-09-21 19:24:28 +02:00
073-beds-carry-copies-of-catalogue-manifests
Issues 072 and 073 name their merges, the branches being gone
2026-09-21 19:24:28 +02:00
074-a-mesh-test-wears-a-catalogue-modules-name
Issue 079: every machine named twice over, found by the large mesh bed; what running that bed cost, on 074
2026-09-22 01:13:29 +02:00
075-a-stocked-runtime-image-is-never-rebuilt-by-the-run
ADR 0093: a fixture that runs a module's runtime carries its name; 074 diagnosed, two beds converted; 075 resolved
2026-09-21 19:30:35 +02:00
076-a-served-fact-made-at-first-start-cannot-be-served
Review corrections: 076 and ADR 0098 say what the authority could and could not do; issues 077 (a fetched fact is fetched once) and 078 (secret accept takes any name) opened
2026-09-21 22:55:11 +02:00
077-a-fact-fetched-at-first-start-is-fetched-once
Review: 077 says what closed it and what did not; 078 names module issue; 074's retired fixture; ADR 0099's scope
2026-09-21 23:58:15 +02:00
078-a-delivered-secret-is-accepted-under-any-name
Review: 077 says what closed it and what did not; 078 names module issue; 074's retired fixture; ADR 0099's scope
2026-09-21 23:58:15 +02:00
079-every-machine-is-named-twice-over
Issue 081 opened (a cache consumer does not use its login); 079 and 080 diagnoses carry the review's consequences
2026-09-22 02:04:29 +02:00
080-a-cache-grant-lets-the-consumer-flush-the-server
Issue 081 opened (a cache consumer does not use its login); 079 and 080 diagnoses carry the review's consequences
2026-09-22 02:04:29 +02:00
081-a-cache-consumer-does-not-use-the-login-it-was-granted
Issue 081: proven by the two-node bed, and what it found about baserow's data directory
2026-09-22 13:53:00 +02:00
082-a-report-that-arrives-while-the-store-restarts-is-lost
Issue 083 opened (other control messages lost while the store restarts); 082's diagnosis carries its review
2026-09-22 13:34:05 +02:00
083-other-control-messages-are-lost-while-the-store-restarts
Issue 083: the proof, the replay caveat, and what is not closed, as three reviews found them
2026-09-22 14:39:29 +02:00
084-taking-networking-on-an-adopted-node-restarts-every-container
ADR 0168: a converged machine is filtered by the mesh alone, and the host says what else refuses (group 7)
2026-10-02 11:58:18 +02:00
085-the-packages-port-given-at-genesis-is-not-a-setting
Research 013: the forge and the registries — a seat answers the wrong question; issues 090 and 085 corrected from the code
2026-09-23 00:38:34 +02:00
086-taking-a-module-narrows-a-port-without-saying-so
Group 6 closed: 086, 090, 098, 099, 100, 101 resolved on the operator's decision, each saying the live row was not run
2026-10-02 11:37:08 +02:00
087-the-controller-cannot-tell-a-host-is-too-old
Issue 087: what I shipped first said the opposite of the truth
2026-09-30 09:29:40 +02:00
088-the-forges-own-address-names-a-port-it-may-not-have
Grooming: five issues were fixed and never closed, and one is not
2026-09-29 22:25:25 +02:00
089-a-contributed-route-names-a-port-the-node-may-have-moved
Grooming: five issues were fixed and never closed, and one is not
2026-09-29 22:25:25 +02:00
090-the-forge-module-does-not-take-over-the-forge-genesis-raised
Group 6 closed: 086, 090, 098, 099, 100, 101 resolved on the operator's decision, each saying the live row was not run
2026-10-02 11:37:08 +02:00
091-a-module-definition-carries-a-machine-port
Accept ADR 0038; close issue 091
2026-09-24 15:52:45 +02:00
092-genesis-publishes-to-a-registry-the-runtime-does-not-trust
Issue 092: it happened twice more — the registry's mesh name, and the mesh's own trust naming the default port
2026-09-22 23:37:05 +02:00
093-the-successor-proxy-cannot-serve-what-the-predecessor-still-serves
ADR 0163: taking a module over is a comparison — what it compares, refuses and carries; designs 05 and 09; group 6's issues located, 093 resolved
2026-10-01 21:12:36 +02:00
094-a-port-published-as-the-machine-side-cannot-be-moved
Issue 094 resolved: a given port names either end and is answered once
2026-09-23 02:37:07 +02:00
095-a-module-assigned-after-genesis-has-no-broker-account
Issues 094 and 095, both found in the first module's cutover
2026-09-23 01:57:10 +02:00
096-a-setting-that-cannot-work-is-stored-and-stops-the-node
ADR 0163 built: the take digest, the minted-secret refusal, the networks setting, settings judged where stored, genesis raising the forge as declared; issues 096, 097, 126 resolved
2026-10-01 23:45:57 +02:00
097-a-resource-that-changes-target-leaves-the-old-one-behind
ADR 0163 built: the take digest, the minted-secret refusal, the networks setting, settings judged where stored, genesis raising the forge as declared; issues 096, 097, 126 resolved
2026-10-01 23:45:57 +02:00
098-taking-a-module-replaces-a-configuration-nobody-compared
Group 6 closed: 086, 090, 098, 099, 100, 101 resolved on the operator's decision, each saying the live row was not run
2026-10-02 11:37:08 +02:00
099-a-modules-image-pin-ages-into-a-downgrade
Group 6 closed: 086, 090, 098, 099, 100, 101 resolved on the operator's decision, each saying the live row was not run
2026-10-02 11:37:08 +02:00
100-a-minted-secret-cannot-be-the-one-the-service-already-uses
Group 6 closed: 086, 090, 098, 099, 100, 101 resolved on the operator's decision, each saying the live row was not run
2026-10-02 11:37:08 +02:00
101-taking-a-service-reached-by-container-name-cuts-its-neighbours-off
Group 6 closed: 086, 090, 098, 099, 100, 101 resolved on the operator's decision, each saying the live row was not run
2026-10-02 11:37:08 +02:00
102-an-address-recorded-at-genesis-or-build-does-not-follow-the-nodes-ports
Issue 102 resolved, verified on the machine with both forwarders gone; 097's orphan was on the host network
2026-09-24 00:02:13 +02:00
103-a-container-is-not-recreated-when-a-file-it-reads-changes
Merge main: the bus design, issues 113/114/117/120 and research 017 landed
2026-09-26 14:16:05 +02:00
104-reconcile-applies-a-stale-declaration-and-refuses-nothing
ADR 0106: the bus is NATS — native, built beside the migration, cut over after its core; issue 104 resolved
2026-09-23 23:39:17 +02:00
105-the-hub-of-the-private-network-is-not-a-seat
ADR 0161: what deserves a seat — the vault's seat, the hub as a placement of capacity one, the uplink holder as the machine's dialect; design 26; issues 105, 106, 138
2026-10-01 15:55:15 +02:00
106-the-vault-claims-no-seat
Issues 106 and 138 resolved (ADR 0161 built and live); 187 notes a report lost without retry
2026-10-01 17:18:17 +02:00
107-a-declaration-carries-no-order
Issue 107 is resolved: a declaration carries its order
2026-09-30 14:13:50 +02:00
108-the-registry-has-no-garbage-collection-once-it-has-two-doors
ADR 0189: the store keeps what the records name, and a maintenance step holds its writers still
2026-10-04 02:40:25 +02:00
109-a-container-keeps-the-address-it-was-made-with
Group 2 is resolved: containers resolve, nothing is copied, a route's name says where it arrives
2026-09-30 14:56:43 +02:00
110-a-container-on-the-runtimes-own-network-cannot-reach-the-resolver
Group 2 is resolved: containers resolve, nothing is copied, a route's name says where it arrives
2026-09-30 14:56:43 +02:00
111-the-resolver-is-told-names-the-mesh-serves-not-only-machines
Issues 111 and 112: the resolver was told the wrong set of names, twice over
2026-09-24 01:32:04 +02:00
112-adopting-a-tunnel-gives-the-mesh-addresses-without-names
Two checks were wrong about where a seat is judged
2026-09-27 18:57:49 +02:00
113-the-object-stores-images-were-withdrawn-upstream
Issue 113 resolved by the repin, and what issue 064 did not cover
2026-09-25 00:55:13 +02:00
114-should-the-controller-be-a-container-or-a-process
Issue 114 is answered: the controller is a process, by ADR 0142
2026-09-29 22:38:11 +02:00
115-a-named-docker-volume-is-invisible-and-one-flag-from-gone
ADR 0107: persistent data is a directory bind, never a named volume
2026-09-24 16:21:51 +02:00
116-route-proxy-has-no-auth-or-ip-restriction
Issue 116: resolved by mesh-controller PR #58
2026-09-25 14:25:24 +02:00
117-a-modules-own-code-is-a-container-and-a-process
The pointers back from what yesterday's records changed, which I missed twice
2026-09-30 00:47:19 +02:00
118-umamis-store-answers-the-dial-and-times-out-the-query
Issue 118 is resolved: it was issue 135, and umami is healthy
2026-09-30 01:54:19 +02:00
119-a-module-definition-decides-where-its-files-live
Issues 173 and 174 resolved; the installation check refuses at registration (ADR 0155)
2026-09-30 22:36:20 +02:00
120-a-provisioner-remembers-what-it-did-not-what-is
Grooming: five issues were fixed and never closed, and one is not
2026-09-29 22:25:25 +02:00
121-builders-real-package-registry-grant-deadlocks-genesis
Issue 121: retract step 4 — the forge's service is not built
2026-09-26 15:36:19 +02:00
122-a-module-cannot-ask-for-its-own-public-name
Issue 173: a module's settings reach every fact it contributes; what the site's rename cost
2026-09-30 21:04:34 +02:00
123-the-image-registry-is-named-after-a-role
ADR 0156: an artifact is what a build produces, and the store's seat is named for its scope
2026-09-30 21:14:40 +02:00
124-a-consumer-cannot-be-told-what-its-provider-derived
ADR 0201 → 0202, and three issues from the night it shipped
2026-10-04 04:33:45 +02:00
125-a-hold-is-not-a-line-in-the-apply-report
Issue 125 is resolved: a hold is a line in the report, and it breaks "all well"
2026-09-30 08:47:36 +02:00
126-a-volume-path-is-not-in-the-spec-comparison
ADR 0163 built: the take digest, the minted-secret refusal, the networks setting, settings judged where stored, genesis raising the forge as declared; issues 096, 097, 126 resolved
2026-10-01 23:45:57 +02:00
127-a-module-event-derives-a-subject-nothing-publishes
Merge main: renumber this branch's records around the trunk's
2026-09-27 18:23:41 +02:00
128-the-hosts-file-is-written-whole
Grooming: five issues were fixed and never closed, and one is not
2026-09-29 22:25:25 +02:00
129-nothing-makes-a-machine-trust-the-meshs-authority
Issue 129: three machines of four trust the mesh, not one
2026-09-30 02:30:23 +02:00
130-undeclaring-a-service-stops-it
Two records were numbered 127; the second becomes 149, and is resolved
2026-09-29 22:33:40 +02:00
131-nothing-tells-the-mesh-a-source-moved
Design 28: 5.5 done, the mesh has one bus; issue 131 resolved
2026-09-28 03:59:39 +02:00
132-a-module-can-be-recorded-without-the-directory-it-lives-in
Issue 132: a module can be recorded without the directory it lives in
2026-09-28 09:20:05 +02:00
133-the-control-planes-schema-is-migrated-at-birth-and-never-again
ADR 0135 supersedes 0133: a module version prepares its state before it runs
2026-09-28 11:57:16 +02:00
134-a-definition-may-still-name-the-mesh
Issues 173 and 174 resolved; the installation check refuses at registration (ADR 0155)
2026-09-30 22:36:20 +02:00
135-a-containers-mesh-names-are-not-compared
Issue 118 is resolved: it was issue 135, and umami is healthy
2026-09-30 01:54:19 +02:00
136-a-module-may-name-a-program-the-machine-does-not-have
Issue 136: a module may name a program the machine does not have, and everything reports success
2026-09-28 20:50:35 +02:00
137-converging-a-machine-cut-off-its-own-guests
ADR 0137: a machine says which networks it routes, and issue 137 is how that was found
2026-09-28 21:31:01 +02:00
138-two-modules-claim-one-seat-and-are-not-interchangeable
Issues 106 and 138 resolved (ADR 0161 built and live); 187 notes a report lost without retry
2026-10-01 17:18:17 +02:00
139-an-internal-route-name-resolves-to-the-consumers-node
Group 2 is resolved: containers resolve, nothing is copied, a route's name says where it arrives
2026-09-30 14:56:43 +02:00
140-an-endpoints-reach-is-not-declared
Issue 140 is resolved, and was resolved before it was read again
2026-09-29 22:19:24 +02:00
141-the-forward-chain-does-not-follow-the-modules
ADR 0168: a converged machine is filtered by the mesh alone, and the host says what else refuses (group 7)
2026-10-02 11:58:18 +02:00
142-the-host-is-the-one-thing-the-mesh-does-not-deliver
Every machine self-updates, verified, and 107's gate has opened
2026-09-30 13:51:46 +02:00
143-converging-does-not-retire-the-firewall-it-found
Issues 143 and 144 resolved: the live row of ADR 0168 read on the home server and the control node
2026-10-02 12:11:17 +02:00
144-the-predecessors-rules-outlive-the-firewall-it-was-found-as
Issues 143 and 144 resolved: the live row of ADR 0168 read on the home server and the control node
2026-10-02 12:11:17 +02:00
145-a-machine-reads-healthy-while-its-modules-cannot-reach-each-other
Group 1: 145's report states its scope, and 107 waits for delivery
2026-09-30 09:00:18 +02:00
146-the-foundation-cannot-be-raised-on-the-bus-the-mesh-runs-on
The records pointed at branches that no longer exist, and two fixes had no sequel
2026-09-30 00:28:35 +02:00
147-the-operators-tools-still-dial-the-bus-that-was-removed
The console shipped: design 34 implemented, as-is 13, issue 147 verified live
2026-09-30 17:13:09 +02:00
148-a-manifest-outside-this-catalogue-has-no-check
Issues 147 and 148 name what fixed them
2026-09-30 16:21:33 +02:00
149-a-declaration-that-shrinks-to-empty-is-skipped-not-sent
Two records were numbered 127; the second becomes 149, and is resolved
2026-09-29 22:33:40 +02:00
150-a-route-is-contributed-before-its-module-is-taken
Issue 152: a node whose plan will not compose withdraws its names from every machine
2026-09-29 23:13:54 +02:00
151-a-new-name-recreates-every-container-in-the-mesh
Group 2 is resolved: containers resolve, nothing is copied, a route's name says where it arrives
2026-09-30 14:56:43 +02:00
152-a-nodes-plan-failure-silently-drops-its-routed-names
The records pointed at branches that no longer exist, and two fixes had no sequel
2026-09-30 00:28:35 +02:00
153-an-adopted-machines-data-cannot-be-placed-where-it-is
Issue 153 resolved: an assignment places a module's directories and its accesses
2026-10-01 00:04:10 +02:00
154-a-machines-own-network-is-not-a-reach
Two records shared a number, twice, and every check passed
2026-09-29 23:38:48 +02:00
155-two-records-may-share-a-number-and-nothing-says-so
The records pointed at branches that no longer exist, and two fixes had no sequel
2026-09-30 00:28:35 +02:00
156-moving-a-consumers-delivery-subject-stops-the-control-plane
The records pointed at branches that no longer exist, and two fixes had no sequel
2026-09-30 00:28:35 +02:00
157-a-routed-names-internal-alias-is-served-by-nothing
Group 2 is resolved: containers resolve, nothing is copied, a route's name says where it arrives
2026-09-30 14:56:43 +02:00
158-the-proxy-re-reads-and-re-logs-every-route-every-two-seconds
Issue 129 is live and reproduced, and needs three steps rather than one
2026-09-30 01:30:24 +02:00
159-an-artifacts-system-is-checked-and-then-ignored
A machine says little about itself, and only when the mesh asks it something
2026-09-30 10:36:40 +02:00
160-a-machine-says-little-about-itself-and-only-when-asked
A machine says little about itself, and only when the mesh asks it something
2026-09-30 10:36:40 +02:00
161-a-delivered-host-carries-none-of-its-link-time-facts
The host self-updates, and an archive cannot be undeclared
2026-09-30 13:16:37 +02:00
162-an-archive-cannot-be-undeclared
Issue 162 resolved: an archive can be undeclared (mesh-host#90)
2026-10-04 12:23:06 +02:00
163-a-delivered-host-stood-aside-on-every-push-and-reported-nothing
Issue 163: a delivered host stood aside on every push and reported nothing
2026-09-30 13:47:28 +02:00
164-a-credential-that-must-be-accepted-is-minted-anyway
Issues 164-168: found provisioning every dependency on ace
2026-09-30 13:28:53 +02:00
165-one-accepted-value-must-be-accepted-once-per-consumer
Issues 164-168: found provisioning every dependency on ace
2026-09-30 13:28:53 +02:00
166-a-requirement-cannot-be-optional
Issues 164-168: found provisioning every dependency on ace
2026-09-30 13:28:53 +02:00
167-code-several-modules-share-has-no-home
Issues 164-168: found provisioning every dependency on ace
2026-09-30 13:28:53 +02:00
168-a-setting-reaches-every-file-and-contribution
Issues 164-168: found provisioning every dependency on ace
2026-09-30 13:28:53 +02:00
169-a-machine-shares-its-files-and-the-mesh-does-not-know
Issue 169: network-share is the module responsible for a node's network shares — a node role
2026-09-30 13:56:24 +02:00
170-assigning-a-module-claims-every-seat-it-could-hold
Issue 170: assigning a module claims every seat it could hold
2026-09-30 14:29:11 +02:00
171-a-modules-own-resolver-knows-no-mesh-name
Issue 171: a module that names its own resolver knows no mesh name
2026-09-30 15:20:26 +02:00
172-the-ssh-client-block-matches-one-spelling-of-a-machine
Issue 172: the ssh client block matches one spelling of a machine's name
2026-09-30 15:25:30 +02:00
173-a-modules-settings-reach-every-fact-it-contributes
Issues 173 and 174 resolved; the installation check refuses at registration (ADR 0155)
2026-09-30 22:36:20 +02:00
174-the-meshs-own-files-for-a-module-are-placed-by-the-definition
Issues 173 and 174 resolved; the installation check refuses at registration (ADR 0155)
2026-09-30 22:36:20 +02:00
175-an-announcement-behind-a-long-build-comes-back
Issue 175: the link to issue 127 resolves
2026-09-30 22:10:38 +02:00
176-the-consoles-build-tool-neither-waits-nor-registers
Issue 176 resolved: a build is taken in where its outcome is heard; the build tool answers with the id
2026-10-01 01:27:49 +02:00
177-the-controllers-check-is-run-by-nobody
Issue 177: the controller's check is run by nobody; the two rotted tests fixed (controller PR 180), the process half open
2026-10-01 01:38:22 +02:00
178-a-routed-name-resolves-to-a-provider-merely-told-it
Issue 178: a routed name resolves to a provider merely told it, and flips between plans (fixed, controller PR 181)
2026-10-01 02:04:55 +02:00
179-an-adopted-identity-providers-admin-never-took-the-minted-secret
Issue 179: an adopted identity provider's admin never took the minted secret (fixed by hand through the server's bootstrap; the design question left open)
2026-10-01 11:02:18 +02:00
180-a-modules-own-secret-cannot-be-rotated
Issue 180: the live rotation done — searxng's secret on the home server through the console
2026-10-01 12:14:49 +02:00
181-an-assignment-does-not-record-which-provider-answers-it
Issue 181 (was 163, was 161): two records answered to 163; renumbered to the next free number across main and open pull requests
2026-10-01 12:15:31 +02:00
182-a-tool-call-reaches-whichever-instance-answers-first
ADR 0159: a tool call names the machine, every answer says which answered, a holder's runtime serves its seat's verbs; issue 182; designs 33 and 34
2026-10-01 14:00:23 +02:00
183-the-controller-could-not-publish-the-memberships-it-issued
Issue 185: a refused membership publish stopped the controller; 183 points to it
2026-10-01 15:42:37 +02:00
184-a-merge-announcement-blocks-the-controllers-receive-loop
Issues 184 and 188 resolved: the merge handler returns at once; a machine is resolved with its pins and a dropped one is said
2026-10-01 20:54:10 +02:00
185-a-refused-membership-publish-stops-the-controller
Issue 185: a refused membership publish stopped the controller; 183 points to it
2026-10-01 15:42:37 +02:00
186-a-release-across-repositories-is-an-order-in-a-persons-head
ADR 0162: a merge produces a tiered plan the mesh keeps; dependencies are one relation; design 30; issues 184, 186
2026-10-01 17:45:48 +02:00
187-the-mesh-tells-nobody-when-it-stops-working
Issues 106 and 138 resolved (ADR 0161 built and live); 187 notes a report lost without retry
2026-10-01 17:18:17 +02:00
188-a-refusal-inside-on-the-network-drops-a-machine-silently
Issues 184 and 188 resolved: the merge handler returns at once; a machine is resolved with its pins and a dropped one is said
2026-10-01 20:54:10 +02:00
189-a-rebuild-from-the-same-commit-is-not-a-move
Issue 189: the plan's half is built; the moved word stays for a decision
2026-10-01 22:25:31 +02:00
190-the-runtimes-configuration-is-written-by-modules-that-are-not-the-runtime
0164: a setting names the file it lands in (issue 198's leak between one module's files); 190 notes the fourth machine now has the resolver
2026-10-02 12:23:28 +02:00
191-a-route-with-only-an-internal-name-is-dropped
Issue 191 resolved: internal-only routes are served to the mesh, live on both proxies
2026-10-02 09:49:25 +02:00
192-the-meshs-tools-reach-a-person-only-by-a-registration-made-by-hand
Issues 192 and 193: the console reaches a person only by hand; the store's read-only query is not
2026-10-02 00:02:51 +02:00
193-the-store-seats-read-only-query-is-read-only-by-convention
Issue 193 resolved: both readers live on every machine, checked by asking each copy who it is
2026-10-02 00:35:03 +02:00
194-the-hosts-own-former-archive-stops-every-apply
Issue 194 resolved: the fixed host forgot its former archive on all four machines
2026-10-02 11:31:29 +02:00
195-every-assigned-module-is-counted-as-a-bus-user-without-a-credential
Issue 195: resolved by the controller composing users only for modules that can read an account
2026-10-04 17:37:20 +02:00
196-the-hub-relays-only-the-ports-it-publishes-itself
Issue 196 resolved: the hub relays the mesh, re-swept live
2026-10-02 11:23:37 +02:00
197-a-physical-link-that-is-down-is-not-filtered-when-it-comes-up
Issue 197 resolved: the wired port is guarded before it is plugged in
2026-10-02 12:22:15 +02:00
198-the-lans-dns-server-ran-outside-the-mesh-and-its-filter-closed-it
Issue 198: the home network's DNS server ran outside the mesh, and its filter closed it
2026-10-02 12:22:31 +02:00
199-a-node-scoped-seats-verb-could-not-be-called-through-the-console
ADR 0169 → 0170: the firewall seat's record renumbered after a collision on main; its built note; cycle.py refuses two records sharing a number
2026-10-02 14:51:22 +02:00
200-the-controllers-answer-to-the-console-is-refused-by-the-bus
Issues 199 (resolved: a node-scoped seat's verb through the console) and 200 (the controller's answer to a long console call is refused by the bus)
2026-10-02 14:25:03 +02:00
201-a-push-recreated-the-controller-behind-the-row-its-successor-wrote
Issue 201: what was established about the race while closing the outage half
2026-10-02 18:19:12 +02:00
202-a-module-whose-required-setting-is-unset-is-silently-left-out
Rebased onto main: ADR 0188 renumbered to 0201, and issue 202's evidence re-taken
2026-10-04 02:44:58 +02:00
203-a-fresh-assignment-is-pushed-before-its-credential-exists
Issues 203, 206 and 207 resolved by mesh-controller #233; 207's diagnosis, with its two questions left open
2026-10-03 11:50:20 +02:00
204-a-controller-handover-re-sent-every-node-a-stale-declaration
Issues 204 and 205 resolved: mesh-controller #232 and mesh-host #79 merged
2026-10-03 11:45:19 +02:00
205-a-package-resource-fails-against-a-stale-package-database
Issues 204 and 205 resolved: mesh-controller #232 and mesh-host #79 merged
2026-10-03 11:45:19 +02:00
206-a-seats-worker-changing-type-strands-the-holder-and-the-build-that-would-fix-it
Issues 203, 206 and 207 resolved by mesh-controller #233; 207's diagnosis, with its two questions left open
2026-10-03 11:50:20 +02:00
207-a-re-made-worker-replayed-every-ask-the-stream-kept
Issues 203, 206 and 207 resolved by mesh-controller #233; 207's diagnosis, with its two questions left open
2026-10-03 11:50:20 +02:00
208-a-seats-worker-is-made-only-when-the-controller-starts
Issue 208: a seat's worker is made only when the controller starts, so a holder assigned later finds none
2026-10-03 11:33:08 +02:00
209-a-bundles-own-sdk-copy-registers-into-a-registry-the-runtime-never-reads
Design 38 WP4 built and proven live on all four machines; issue 209 proven live
2026-10-03 13:20:12 +02:00
210-the-host-re-creates-the-nodes-runtime-on-every-reconcile
Issue 210 resolved by mesh-host #80: an unchanged process keeps its record
2026-10-03 13:44:49 +02:00
211-a-bundle-is-built-before-the-toolchain-it-is-compiled-in
Issues 211, 212, 214, 216, 217 resolved with their proofs; 215's fix recorded
2026-10-04 00:24:53 +02:00
212-a-toolchain-rebuild-keeps-the-sdk-it-cached
Issues 211, 212, 214, 216, 217 resolved with their proofs; 215's fix recorded
2026-10-04 00:24:53 +02:00
213-the-controller-is-a-go-program-run-in-a-container
Issues 213 and 223 resolved: the controller runs as a process, and genesis hands over to it
2026-10-04 02:19:09 +02:00
214-a-plan-loses-track-of-the-controller-it-rebuilds
Issues 211, 212, 214, 216, 217 resolved with their proofs; 215's fix recorded
2026-10-04 00:24:53 +02:00
215-a-module-built-at-a-commit-stops-following-its-branch
Issues 215, 221 resolved with live proof; 222 diagnosed and resolved
2026-10-04 01:29:32 +02:00
216-a-bundle-nothing-loads-is-built-and-never-delivered
Issues 211, 212, 214, 216, 217 resolved with their proofs; 215's fix recorded
2026-10-04 00:24:53 +02:00
217-a-refused-announcement-took-down-every-containers-runtime
Issues 211, 212, 214, 216, 217 resolved with their proofs; 215's fix recorded
2026-10-04 00:24:53 +02:00
218-a-mesh-seat-is-answered-by-a-module-that-does-not-hold-it
Issue 218 resolved: the runtime follows its membership, and a refused subscription is not fatal
2026-10-04 00:14:04 +02:00
219-an-older-build-that-finishes-later-replaces-a-newer-one
Issues 219, 220 resolved, 221 located, 222 and 223 opened; WP4c built and proven
2026-10-04 01:14:44 +02:00
220-a-delivered-bundle-keeps-the-files-of-the-one-before
Issues 219, 220 resolved, 221 located, 222 and 223 opened; WP4c built and proven
2026-10-04 01:14:44 +02:00
221-a-build-machine-learns-a-new-builder-only-from-a-push
Issues 215, 221 resolved with live proof; 222 diagnosed and resolved
2026-10-04 01:29:32 +02:00
222-an-assignment-is-refused-on-the-bus-until-the-bus-machine-is-pushed
Issues 215, 221 resolved with live proof; 222 diagnosed and resolved
2026-10-04 01:29:32 +02:00
223-a-new-mesh-installs-its-controller-as-a-container
Issues 213 and 223 resolved: the controller runs as a process, and genesis hands over to it
2026-10-04 02:19:09 +02:00
224-an-apply-reopens-a-maintenance-window-by-recreating-what-it-held-still
Review before merge: the multi-holder boundary, the window's open race, the sweep's bounds
2026-10-04 03:27:32 +02:00
225-a-provisioner-cannot-read-the-grant-secrets-since-its-code-left-the-container
Issues 225, 226, 227 resolved with their live proofs; 232 opened and resolved
2026-10-04 12:37:31 +02:00
226-the-stores-sweep-stops-at-the-first-reference-recorded-with-an-address
Issues 225, 226, 227 resolved with their live proofs; 232 opened and resolved
2026-10-04 12:37:31 +02:00
227-the-photo-apps-admin-client-asks-for-the-port-the-proxy-holds
Issues 225, 226, 227 resolved with their live proofs; 232 opened and resolved
2026-10-04 12:37:31 +02:00
228-a-login-the-mesh-set-is-never-given-back
Issue 225 → 228: the number was taken on main while this branch was open
2026-10-04 10:30:46 +02:00
229-a-rollout-cannot-be-followed-through-the-meshs-tools
Issue 229: the stale tool list is a connection opened before discovery; the fix is list-changed
2026-10-04 11:01:50 +02:00
230-a-host-that-hands-over-to-a-newer-one-loses-its-report-and-a-plan-waits-for-ever
Issue 230: a report is also lost when the apply restarts the bus
2026-10-04 11:00:27 +02:00
231-a-misspelled-placeholder-is-written-out-as-text
Research 026/03: what the predecessor taught; issue 231: a misspelled placeholder is written out as text
2026-10-04 11:49:19 +02:00
232-a-consumer-authenticates-against-a-database-its-user-does-not-live-in
Issue 232: a consumer authenticates against a database its user does not live in
2026-10-04 12:33:57 +02:00
233-a-host-without-its-package-managers-configuration-refuses-the-declaration-that-would-restore-it
Issues 233, 234: a stale declaration removed four modules, and the host could not recover
2026-10-04 14:54:50 +02:00
234-a-later-declaration-left-out-four-assigned-modules-and-a-machine-applied-it
Issues 233, 234: a stale declaration removed four modules, and the host could not recover
2026-10-04 14:54:50 +02:00
235-an-assignment-that-cannot-be-composed-is-recorded-anyway
Issues 235, 236: an assignment and a check that let through what then fails
2026-10-04 15:17:46 +02:00
236-the-catalogue-check-passes-a-manifest-the-host-refuses
Issues 235, 236: an assignment and a check that let through what then fails
2026-10-04 15:17:46 +02:00
237-assign-says-a-seat-is-held-and-that-the-node-does-not-resolve-for-lack-of-it
Issues 237, 238: a self-contradicting assign answer, and the operator's address banned
2026-10-04 17:06:38 +02:00
238-the-mesh-banned-its-own-operators-address-for-four-weeks
Research 030 and proposed ADR 0214: backups guard against mistakes and stay on the machine
2026-10-05 10:07:36 +02:00
239-a-module-name-is-taken-over-by-another-repository-and-nothing-refuses
Issue 239: name no installation
2026-10-05 02:24:27 +02:00
240-a-dry-run-build-is-recorded-and-rolled-out
Issues 245, 246; 240 resolved, 242 located
2026-10-05 14:54:38 +02:00
241-one-unreadable-grants-file-dropped-every-database-on-the-control-node
Issues 241, 242: one unreadable grants file dropped every database, and the mesh has no backups
2026-10-05 02:24:11 +02:00
242-the-mesh-has-no-backups
Issues 245, 246; 240 resolved, 242 located
2026-10-05 14:54:38 +02:00
243-a-rebuilt-licence-store-silences-every-node
Issue 243: a rebuilt licence store silences every node
2026-10-05 09:59:17 +02:00
244-a-verb-whose-schema-is-empty-cannot-be-called-through-the-console
ADR 0189 collects again; issue 244: a verb with an empty schema cannot be called
2026-10-05 14:38:17 +02:00
245-a-media-servers-previews-were-reached-through-a-link-its-container-never-mounted
Issues 245, 246; 240 resolved, 242 located
2026-10-05 14:54:38 +02:00
246-setting-a-modules-settings-replaces-the-whole-layer-and-nothing-shows-it-first
Issues 245, 246; 240 resolved, 242 located
2026-10-05 14:54:38 +02:00
README.md
The numbering is the flow: decisions are 02, design is 03
2026-08-23 18:05:11 +02:00

README.md

04-ISSUES

The front door for "something is wrong" at the level of the mesh's design or governance. Diagnosis happens here, where the whole mesh is in view; the fix lands in the owning code repository.

What belongs here

Belongs here Belongs in the knowledge base
The design permits a failure to be silent How to fix one occurrence of it
A documented rule is enforced by nothing A command that works around it
A stated invariant is false in practice A node-specific quirk
The owner is unknown and finding it needs the whole mesh in view Symptom → fix, once the answer is known

The knowledge base already holds the operational record and is indexed on symptoms. This folder is not a second copy of it. An issue here is a question HQ must answer; an entry there is an incident someone must clear. An issue whose answer is a general lesson belongs in both.

Structure

NNN-short-name/
  00-report.md      the symptom as observed, with the evidence; status in frontmatter
  01-diagnosis.md   the investigation trail, dated, including what was ruled out

Frontmatter, on 00-report.md

---
status: open | diagnosing | located | resolved | wontfix
opened: YYYY-MM-DD
located-in: []       # owning repo(s) or module(s), filled by diagnosis
fixed-by:            # pull request or commit reference, filled at resolution
amended-design:      # design doc path, when the root cause was a design gap
---

Rules

  • Anyone may open an issue. No localisation is required to report one.
  • The full flow is playbook 00-META/process/03-issues.md.
  • Closed issues are never deleted — they are the mesh's symptom-to-component memory.
  • wontfix is legitimate and requires a sentence saying why.
Reference in New Issue View Git Blame Copy Permalink