mesh-vault: read which modules of a machine the vault judges handed, and why, with own_handed (issue 1966)

The vault leaves a handed module's own secrets out of `own`, judged by the plan in its assignment, and nothing read
that judgement: on 2026-11-04 the circle on ace (no plan, so not handed, so refused, so no plan) could be told only by
reading the provisioner's plans beside the node-engine's refusals. own_handed answers, per module the vault keeps an
own secret of on the machine or that is placed there, handed or not and why.

Claude-Session: https://claude.ai/code/session_01JG73KJNrH5EgFXMKKYSrig

This commit is contained in:

jschoubben

2026-11-04 02:29:37 +01:00

parent dd458cb155

commit 237a534ca4

4 changed files with 111 additions and 0 deletions

									
										modules/mesh-vault/module.json
									
		+1
		
												View File
												
				@@ -173,6 +173,7 @@

				    "secret_holders",

				    "secret_verify",

				    "secret_handed",

				    "own_handed",

				    "secret_own",

				    "account_hash",

				    "account_adopt",