Privilege no caller named controller in the vault; match a hand act's verb exactly

The controller is not placed (ADR 0590), yet the vault still answered a
caller named controller alone (accept), took its relay of who asked
(secret-ask, rotate's by) and sealed it the core's credentials. Those
branches and accept go with their tests; a node's account alone is never
minted or rotated here. The sensitive-verb judge now needs the act's verb to
be the vault's own, mesh-vault.<verb>, not any verb ending so (issue 1126
review 1).

Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

This commit is contained in:

jschoubben

2026-11-02 12:29:56 +01:00

parent 3ed3266dde

commit ecc7621274

16 changed files with 88 additions and 399 deletions

									
										modules/mesh-vault/module.json
									
		-1
	
												View File
												
				@@ -198,7 +198,6 @@

				      "scope": "mesh",

				      "serves": [

				        "get",

				        "accept",

				        "secret-ask",

				        "issued",

				        "rotate",