3 Commits

Include renames

Author	SHA1	Message	Date
jschoubben	0bfc72d230	Make the controller checks strict: nothing names the placed-nowhere controller ... controllerdeps refuses any manifest naming the controller's seat, states or buckets, the lease and the entries once kept to its write among them, and any module file naming one of its buckets (ADR 0590 §5). The words check refuses a controller address in any text a module shows. The handacts check and noplacement's list of assignments readers are folded into it (issue 1126 B10). Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL	2026-11-02 12:29:56 +01:00
jschoubben	2c5e9c9a98	Pin mesh-sdk at c21d8fd, the removal group's head, so every member builds the same contract (issue 774) ... Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL	2026-11-02 00:53:42 +01:00
jschoubben	2877b87f29	A catalogue test refuses a manifest that still depends on the controller at the lease write (ADR 0571 §13) ... checks/controllerdeps decodes every module.json and judges the set with mesh-sdk's ManifestRefusals at the phase of the lease write's own delivery, so no module reads, invokes or consumes the controller beyond the lease and the entries kept to the write. At origin/main it refuses 11 declarations (the ones S7-S12 drop); at this head it passes. Two tests (the real tree, and four rows on a tree of its own), in a new check of its own; go.mod pins the previous mesh-sdk until the group's head is pinned, and go.sum needs the group's entries then. (issue 774, 774/S13) Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL	2026-11-02 00:21:13 +01:00