Catalog readers decode instead of judging; mesh-build-go builds against the asked package versions (ADR 0578, 0573 §2) #585

Merged

mesh-tools merged 24 commits from feat/judge-once into main 2026-11-01 07:54:15 +00:00

Conversation 5 Commits 24 Files Changed 231

+2580 -621

mesh-tools commented 2026-11-01 02:19:51 +00:00

Member

Copy Link

Copy Source

Delivery group feat/judge-once (mesh-sdk, mesh-delivery, mesh-catalog, mesh-host, mesh-controller, mesh-tools), one check, one Approve. Issue 1585. Decisions: ADR 0578 (a manifest is judged once, by the indexer; every other part decodes it and takes the verdict; packages carry contracts only), ADR 0579 (a stricter judge never holds a module already running: it warns), and ADR 0573 §2/§4 built (each build takes the latest published package; a group check builds against the group's package heads).

Quick fix (readers hold a refused module, ~4 h) weighed against the thorough fix (judge once, ~32 h) and the thorough fix chosen with the operator (2026-11-01): the kind (a reader with an old judge silences itself) was met twice on 2026-10-31.

Rule bent, said here: mesh-delivery's unit tests rise 662 -> 892 because the judge's tests moved there from mesh-sdk (1686 -> 1440); the mesh-wide total falls. After the delivery every Go module rebuilds against the latest mesh-sdk (about 120 modules; all compile against it).

Controller research "The controller, NATS-native": manifest judgement leaves the controller; it reads the indexer's verdicts state.

This member: checks and build modules decode only; checks/sdkjudge refuses a manifest judge in mesh-sdk; mesh-build-go writes the asked versions into the build's modfile; 98 modules pin the group's mesh-sdk.

Reviewed-by: reviewer-1585@shanks at 432326264f
Pushed-by: lead-47@shanks

https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

The first group check failed only on gofmt (one blank line in mesh-sdk), the second only on TestTheSeatSweepsAtABuildsEndOnARealBusOnceTheLeaseIsAway, which fails on main too: its fixture dated the builder's log 2026-10-01, outside the holder's 30-day window; this head carries the test-only fix (issue 1955, L7a).

Delivery group feat/judge-once (mesh-sdk, mesh-delivery, mesh-catalog, mesh-host, mesh-controller, mesh-tools), one check, one Approve. Issue 1585. Decisions: ADR 0578 (a manifest is judged once, by the indexer; every other part decodes it and takes the verdict; packages carry contracts only), ADR 0579 (a stricter judge never holds a module already running: it warns), and ADR 0573 §2/§4 built (each build takes the latest published package; a group check builds against the group's package heads). Quick fix (readers hold a refused module, ~4 h) weighed against the thorough fix (judge once, ~32 h) and the thorough fix chosen with the operator (2026-11-01): the kind (a reader with an old judge silences itself) was met twice on 2026-10-31. Rule bent, said here: mesh-delivery's unit tests rise 662 -> 892 because the judge's tests moved there from mesh-sdk (1686 -> 1440); the mesh-wide total falls. After the delivery every Go module rebuilds against the latest mesh-sdk (about 120 modules; all compile against it). Controller research "The controller, NATS-native": manifest judgement leaves the controller; it reads the indexer's verdicts state. This member: checks and build modules decode only; checks/sdkjudge refuses a manifest judge in mesh-sdk; mesh-build-go writes the asked versions into the build's modfile; 98 modules pin the group's mesh-sdk. Reviewed-by: reviewer-1585@shanks at 432326264f6c34ceec1fb67f5ca9d450b4caaa1d Pushed-by: lead-47@shanks https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL The first group check failed only on gofmt (one blank line in mesh-sdk), the second only on TestTheSeatSweepsAtABuildsEndOnARealBusOnceTheLeaseIsAway, which fails on main too: its fixture dated the builder's log 2026-10-01, outside the holder's 30-day window; this head carries the test-only fix (issue 1955, L7a).

mesh-tools added 22 commits 2026-11-01 02:19:51 +00:00

checks/manifests decodes manifests and judges none, the checker's judge does (ADR 0578 §2) ... 376d0211e9

Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

checks/credentialform stops judging credential forms, the checker's judge runs that rule (ADR 0578 §2) ... 349a5774cd

Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

checks/health counts resources from decoded manifests instead of judging them (ADR 0578 §3) ... 0bccd9f9e9

Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

Refuse a manifest judge in mesh-sdk beside a catalogue change: problem functions and allow-list tables (ADR 0578 §4) ... 7a143d1f22

Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

mesh-build-go decodes the manifest it builds from and judges none (ADR 0578 §3) ... 9b12dfaf21

Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

mesh-build-image decodes the manifest it builds from and judges none (ADR 0578 §3) ... a924397765

Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

only-office tests decode their manifest instead of judging it (ADR 0578 §3) ... 7239b3e3dd

Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

mesh-conditions tests decode their manifest instead of judging it (ADR 0578 §3) ... d8e2f9f6a6

Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

mesh-delivery-gate tests decode their manifest instead of judging it (ADR 0578 §3) ... 2d9ba73221

Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

mesh-provisioner takes the indexer's verdicts through mesh-sdk, so a refused module is held, not fatal (ADR 0578 §3) ... d2b852c224

Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

checks/sdkjudge lets the composer's placeholder and template refusals stay, and the real tree pass (ADR 0578 §5) ... 021e641840

Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

checks/manifests, credentialform and health build on the mesh-sdk without the judge ... 762982dee7

Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

mesh-build-node tests decode their manifest instead of judging it (ADR 0578 §3) ... fa88633427

Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

mesh-build-go builds on the mesh-sdk without the judge (ADR 0578 §4) ... 5b09353484

Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

mesh-build-image builds on the mesh-sdk without the judge (ADR 0578 §4) ... baa2d93310

Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

only-office builds on the mesh-sdk without the judge (ADR 0578 §4) ... e1799f3534

Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

mesh-conditions builds on the mesh-sdk without the judge (ADR 0578 §4) ... 84264b4fd0

Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

mesh-delivery-gate builds on the mesh-sdk without the judge (ADR 0578 §4) ... eed6e08000

Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

mesh-provisioner builds on the mesh-sdk without the judge (ADR 0578 §4) ... 9fa7f7b535

Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

Build Go modules against the package versions an ask names ... fcd7df5356

ADR 0573 §2 and §4 have a build take the latest published version of
each mesh package, or a group's own head, whatever go.mod names (issue
1585, S15). The fetch writes each asked version into the directory's
temporary modfile before downloading: a trunk commit is required at its
Go version with its checksums for go mod verify, a pull request's head
is placed as a pin on a head is, a newer go.mod version is kept and
said, and the answer and the log name each.

Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

Pin every module that names mesh-sdk at the group's final head, without the judge (ADR 0578 §4) ... c19edac804

Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

Pin every module to the group's mesh-sdk head after review round 1 ... c4406da4a3

Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

mesh-tools commented 2026-11-01 02:20:09 +00:00

Author

Member

Copy Link

Copy Source

Delivery novox/mesh-catalog@432326264f6c — merged since 2026-11-01T07:54:21Z

Source — source.main moved to novox/mesh-catalog@462bcfe451. Whether it reached the machines is mesh-delivery-view's, derived from source.main, the wants and the haves.

Group feat/judge-once: novox/mesh-catalog@432326264f, novox/mesh-controller@b564c315d0, novox/mesh-delivery@8e9cc58301, novox/mesh-host@07066fe7a0, novox/mesh-sdk@8af6e72669, novox/mesh-tools@c494018074

• composed together: pass — the checker's verdict at the members' heads (a0269268ba29)

Transitions

• 2026-11-01 02:41 (new) → proposed (announced): novox/mesh-catalog#585's head announced
• 2026-11-01 02:41 proposed → ready (accepted): a verdict names this commit and the trunk's head as its trunk commit, the gate passed or warned, and the repository's own check did not fail; or the check gates no merge (check-gates-merge false)
• 2026-11-01 07:54 ready → merged (merged): on the trunk its modules follow: merged there

The commit's note under refs/notes/mesh-plan keeps every transition of this change up to its merge: git log --notes=mesh-plan.

<!-- mesh-delivery:view --> **Delivery** `novox/mesh-catalog@432326264f6c` — **merged** since 2026-11-01T07:54:21Z **Source** — source.main moved to novox/mesh-catalog@462bcfe4510e. Whether it reached the machines is `mesh-delivery-view`'s, derived from `source.main`, the wants and the haves. **Group** `feat/judge-once`: novox/mesh-catalog@432326264f6c, novox/mesh-controller@b564c315d012, novox/mesh-delivery@8e9cc5830119, novox/mesh-host@07066fe7a0a8, novox/mesh-sdk@8af6e7266915, novox/mesh-tools@c4940180746a - composed together: pass — the checker's verdict at the members' heads (a0269268ba29) **Transitions** - 2026-11-01 02:41 (new) → proposed (announced): novox/mesh-catalog#585's head announced - 2026-11-01 02:41 proposed → ready (accepted): a verdict names this commit and the trunk's head as its trunk commit, the gate passed or warned, and the repository's own check did not fail; or the check gates no merge (check-gates-merge false) - 2026-11-01 07:54 ready → merged (merged): on the trunk its modules follow: merged there The commit's note under `refs/notes/mesh-plan` keeps every transition of this change up to its merge: `git log --notes=mesh-plan`.

mesh-tools commented 2026-11-01 02:22:12 +00:00

Author

Member

Copy Link

Copy Source

mesh-delivery: the operator's Approve of this pull request's merge into main is ended: its head 62cddf4efc62 is no longer the pull request's head, or the pull request closed. Nothing is merged on it. The operator is asked again once the checks pass at the new head.

mesh-delivery: the operator's Approve of this pull request's merge into main is ended: its head 62cddf4efc62 is no longer the pull request's head, or the pull request closed. Nothing is merged on it. The operator is asked again once the checks pass at the new head.

jschoubben added 1 commit 2026-11-01 02:31:09 +00:00

Pin every module to the group's mesh-sdk head after the gofmt fix ... 3e08301b27

Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

jschoubben added 1 commit 2026-11-01 02:41:20 +00:00

artifact-store-tools: date the sweep test's builder log on the real clock ... 432326264f

The test copies aMesh's log, dated from 2026-10-01 for a fixed clock, but runs the holder on time.Now; since
2026-10-31 every entry fell outside the log's 30 days, so the sweep rightly kept every copy as unrecorded and the
mirror act was missing. The sweep is right; the fixture is shifted to now (issue 1955, L7a).

Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

mesh-tools commented 2026-11-01 02:41:30 +00:00

Author

Member

Copy Link

Copy Source

mesh-delivery: the operator's Approve of this pull request's merge into main is ended: a head it covers moved on: the heads it covers are no longer the group's heads. Nothing is merged on it. The operator is asked again once the checks pass at the new head.

mesh-delivery: the operator's Approve of this pull request's merge into main is ended: a head it covers moved on: the heads it covers are no longer the group's heads. Nothing is merged on it. The operator is asked again once the checks pass at the new head.

mesh-tools commented 2026-11-01 03:14:48 +00:00

Author

Member

Copy Link

Copy Source

mesh-delivery: the operator's Approve of this pull request's merge into main is ended: a head it covers moved on: the heads it covers are no longer the group's heads. Nothing is merged on it. The operator is asked again once the checks pass at the new head.

mesh-delivery: the operator's Approve of this pull request's merge into main is ended: a head it covers moved on: the heads it covers are no longer the group's heads. Nothing is merged on it. The operator is asked again once the checks pass at the new head.

mesh-tools commented 2026-11-01 03:50:19 +00:00

Author

Member

Copy Link

Copy Source

mesh-delivery: the operator's Approve of this pull request's merge into main is ended: a head it covers moved on: the heads it covers are no longer the group's heads. Nothing is merged on it. The operator is asked again once the checks pass at the new head.

mesh-delivery: the operator's Approve of this pull request's merge into main is ended: a head it covers moved on: the heads it covers are no longer the group's heads. Nothing is merged on it. The operator is asked again once the checks pass at the new head.

mesh-tools merged commit 462bcfe451 into main 2026-11-01 07:54:15 +00:00

mesh-tools deleted branch feat/judge-once 2026-11-01 07:54:15 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

mesh/ready

Reviewed and ready: mesh-delivery merges at the marked head once its checks pass (hq ADR 0364)

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

agent-ace agent-g14 agent-novox agent-shanks jschoubben mesh-tools miel.truyen nox-agent

No Assignees

2 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: novox/mesh-catalog#585