jschoubben
418261213c
ADR 0290 rule 9: once the import is checked record by record, hq keeps no copy. The records and efforts are removed; every link or path to them reads "ADR NNNN" or "research NNN"; a design's decisions: lists "ADR NNNN". 02-DECISIONS keeps a pointer README with the reading order's six topics, which the knowledge base reads through the records module; 01-RESEARCH keeps a pointer README. The checks drop the rules that judged records (the knowledge base holds each at propose; checks/README.md says where) and refuse a record written here again. Playbooks 01 and 02 and the skills write and read records with the knowledge base's verbs.
2.4 KiB
Diagnosis — 2026-09-21
- The package half was read against what the mesh now runs. The mesh's package registry has
proxied the public one for every package since early September, before this issue was opened;
and the builder's
.npmrcnames the mesh's registry for the mesh's own scope only, so a public package is asked of the public registry directly. Either the failing build ran before the proxy, or its Dockerfile set the registry itself, or the build machine could not reach the public registry at that moment. The report does not say which, and the 404 cannot be placed without running the build again. Not fixed; not reproduced either. - The image half has a precedent. The lab hit the same refusal pulling a vendor tool and found
the cause was the public hub denying anonymous pulls, not the mesh's redirect; the fix was to
pin the same image from another registry. A
COPY --fromof a public image is a build input the manifest does not declare, so the mesh cannot pre-fetch or pin it the way it pins bases — which is the second open question, and the one a decision has to settle. - Ruled out: that the build environment has no internet. Package installs from the system's repositories succeed in the same Dockerfiles.
Located in: the builder (what it tells npm and the runtime) and the catalogue (three modules
whose Dockerfiles fetch what no manifest names). The image half is decided and built:
ADR 0097 — a vendor image
is declared under build.on, copied in, and a recipe fetching what is undeclared is refused. Still
open: the package half — a build must be re-run against the mesh's proxying registry to place the
404 — and the three recipes themselves, which now declare their images or are refused.
2026-09-21, later. The package half was placed by a run rather than a reproduction: the catalogue was read again, and exactly one recipe installs a public package — the catalogue module's own, which installs a postgres driver into an empty directory. That module was built through the mesh's builder and installed in the genesis bed run that day, against the mesh's package registry as it now proxies the public one. The 404 the report saw is not reproducible on current code. No recipe copies out of a public image any more either; the vendor-tool case that opened the image half was rewritten before the issue was, and the rule that would catch its return is ADR 0097. Resolved.