2 Commits

Include renames

Author	SHA1	Message	Date
jschoubben	4492bc3013	CAT-G2: the packages token is renewed on the forge's refusal, said as a finding, never on a timer ... The Go bundle raises packages-token-refused in the module's findings state when the forge answers 401 to a write; the watcher mints afresh on that key's event and clears it (lead's ruling on A3n, map-onto-how-the-mesh-is-built: nothing waits on a timer). Claude-Session: https://claude.ai/code/session_01JG73KJNrH5EgFXMKKYSrig	2026-11-04 14:47:26 +01:00
jschoubben	11acf04976	CAT-G2: the package seats write as an account of their own, the tools' token reads packages ... Design 51 keeps each holder's write side as an own secret beside a read-only tool token. The Go bundle wrote as the forge's administrator; it now reads with the tools' token (read:package added) and writes with the mesh-packages account's token (write:package alone), which the watcher makes, mints, keeps and renews. Claude-Session: https://claude.ai/code/session_01JG73KJNrH5EgFXMKKYSrig	2026-11-04 14:14:14 +01:00