The bus, the provisioner and its client say their own secrets are the core's credentials, and the vault keeps no list of modules; pinned at mesh-sdk 4f141ff (issue 774, the operator 2026-11-03)

modules/nats/module.json

@@ -3,7 +3,7 @@
   "version": "1",
   "upgrade": {
     "policy": "record",
-    "why": "the bus: replaced only as a planned step a person starts (`bus upgrade`), its streams snapshotted first and checked after (hq ADR 0236); the controller holds this whatever is said here"
+    "why": "the bus keeps the streams of the whole mesh: it moves on the operator's Approve of its release, its streams snapshotted first (hq ADR 0236, ADR 0599)"
   },
   "provides": [
     {
@@ -21,6 +21,7 @@
     }
   ],
   "bus-users": "/var/lib/nats-module/conf/accounts.conf",
+  "core-credentials": true,
   "own-secrets": {
     "broker": "${dir:mesh-state}/broker",
     "broker-nats-tools": "${dir:tools-secret}/broker-nats-tools"