From 81a80c675c73864b6e0d62815da58bf726489965 Mon Sep 17 00:00:00 2001
From: jochen <jschoubben@gmail.com>
Date: Sun, 13 Sep 2026 00:57:41 +0200
Subject: [PATCH] The builder declares what it announces
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Its account is scoped from what it emits and consumes, and it declared neither —
which is why asking for a generic module account produced one that authenticated
and could do nothing, with the refusal surfacing a layer away as a permissions
error against a queue.

Declaring the announcement is not documentation here. It is what the permission
is derived from.

Claude-Session: https://claude.ai/code/session_01D6qtiYU3P9jk3pnAXyAFyx
---
 modules/builder/module.json | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/modules/builder/module.json b/modules/builder/module.json
index 8de43ea..c9542aa 100644
--- a/modules/builder/module.json
+++ b/modules/builder/module.json
@@ -13,6 +13,9 @@
   "requires": [
     "artifact-store"
   ],
+  "emits": [
+    "module.builder.built"
+  ],
   "own-secrets": {
     "broker": "/var/lib/mesh/builder/broker"
   },