mesh-vault signs: its signing key and authority made once with their operator copies, the verb sign for a node's own certificate from bus state, the event signed, the state signers and the tools that read and reassert them (issue 774, ADR 0550 §2)

modules/mesh-vault/module.json

@@ -17,7 +17,8 @@
     "secret-changed",
     "account-hashed",
     "own-replaced",
-    "account-issued"
+    "account-issued",
+    "signed"
   ],
   "reads": [
     "mesh-controller.assignments",
@@ -30,7 +31,8 @@
     {
       "name": "bus-accounts",
       "history": 2
-    }
+    },
+    "signers"
   ],
   "receives": {
     "secret": "${dir:grants}/mesh.json"
@@ -171,7 +173,10 @@
     "vault_status",
     "vault_health",
     "own_drift",
-    "own_take_switch"
+    "own_take_switch",
+    "vault_signers",
+    "vault_signed",
+    "signers_reassert"
   ],
   "claims": [
     {
@@ -187,7 +192,8 @@
         "node-key",
         "move-asks",
         "own",
-        "issue-account"
+        "issue-account",
+        "sign"
       ]
     }
   ]