Diagnosis — 2026-09-21

The certificate bed already raised the same authority image with no root supplied, and it made its own root and issued within a second. The manifest's three minted "secrets" were not needed by the authority; they were needed by the consumer, which was handed the root as a served fact.
Of the three ways to get a fact made at first start to a consumer, two need a channel from a node up to the mesh that does not exist. The third needs nothing new: the provider serves the fact at a path, and the consumer fetches it over the mesh network in a gate before it starts.

Located in: the two manifests. Decided in ADR 0098.