L3 recovery: take core-credentials out of the bus's, the provisioner's and its client's manifests until the judge that knows it runs (issue 774, issue 1585)
#604
Merged
mesh-toolsmerged 1 commits from fix/l3-words-after-judge into main2026-11-03 21:09:03 +00:00
Blocking fault under issue 774 (design 47, L3), a group of three with mesh-delivery and mesh-tools on branch fix/l3-words-after-judge.
What is broken (live since 2026-11-03 21:16). The running indexer (old build) refuses manifests carrying core-credentials (nats, mesh-provisioner, mesh-provisioner-client) and tool-runner (node-tools); the grants part holds the bus user list, so no new build gets a grant and the new indexer is held. Nothing new is delivered.
This member. Removes core-credentials from those three manifests; the running parts fall back to their name lists (node-engine CoreCredentialModules; the vault holds no list). The word comes back right after the new indexer runs.
Quick or thorough. Quick now (every delivery blocked); thorough on issue 1585 note 42.
Reviewed-by: mesh-code-reviewer@shanks at f2eb548204
Pushed-by: lead-47@shanks
Blocking fault under issue 774 (design 47, L3), a group of three with mesh-delivery and mesh-tools on branch fix/l3-words-after-judge.
**What is broken (live since 2026-11-03 21:16).** The running indexer (old build) refuses manifests carrying core-credentials (nats, mesh-provisioner, mesh-provisioner-client) and tool-runner (node-tools); the grants part holds the bus user list, so no new build gets a grant and the new indexer is held. Nothing new is delivered.
**This member.** Removes core-credentials from those three manifests; the running parts fall back to their name lists (node-engine CoreCredentialModules; the vault holds no list). The word comes back right after the new indexer runs.
**Quick or thorough.** Quick now (every delivery blocked); thorough on issue 1585 note 42.
Reviewed-by: mesh-code-reviewer@shanks at f2eb54820469bfa7f799d4b87fd21db573de56f1
Pushed-by: lead-47@shanks
https://claude.ai/code/session_01JG73KG7AfSdh6FP8VrBqCn
The running indexer's judge refuses the word, a refused manifest holds the bus's user list, and so the indexer build
that knows the word is never granted. The node-engine on main still finds these modules by its name list, and the
vault keeps no list, so no credential is lost; the word comes back once the new judge runs (issue 774).
Claude-Session: https://claude.ai/code/session_01JG73KG7AfSdh6FP8VrBqCn
Deliverynovox/mesh-catalog@f2eb54820469 — merged since 2026-11-03T21:09:05Z
Source — source.main moved to novox/mesh-catalog@be24f5ac38. Whether it reached the machines is mesh-delivery-view's, derived from source.main, the wants and the haves.
composed together: pass — the checker's verdict at the members' heads (fd74298189f9)
Transitions
2026-11-03 20:47 (new) → proposed (announced): novox/mesh-catalog#604's head announced
2026-11-03 20:47 proposed → ready (accepted): a verdict names this commit and the trunk's head as its trunk commit, the gate passed or warned, and the repository's own check did not fail; or the check gates no merge (check-gates-merge false)
2026-11-03 21:09 ready → merged (merged): on the trunk its modules follow: merged there
The commit's note under refs/notes/mesh-plan keeps every transition of this change up to its merge: git log --notes=mesh-plan.
<!-- mesh-delivery:view -->
**Delivery** `novox/mesh-catalog@f2eb54820469` — **merged** since 2026-11-03T21:09:05Z
**Source** — source.main moved to novox/mesh-catalog@be24f5ac387f. Whether it reached the machines is `mesh-delivery-view`'s, derived from `source.main`, the wants and the haves.
**Group** `fix/l3-words-after-judge`: novox/mesh-catalog@f2eb54820469, novox/mesh-delivery@e3ce4b095ce9, novox/mesh-tools@40e0e8282b38
- composed together: pass — the checker's verdict at the members' heads (fd74298189f9)
**Transitions**
- 2026-11-03 20:47 (new) → proposed (announced): novox/mesh-catalog#604's head announced
- 2026-11-03 20:47 proposed → ready (accepted): a verdict names this commit and the trunk's head as its trunk commit, the gate passed or warned, and the repository's own check did not fail; or the check gates no merge (check-gates-merge false)
- 2026-11-03 21:09 ready → merged (merged): on the trunk its modules follow: merged there
The commit's note under `refs/notes/mesh-plan` keeps every transition of this change up to its merge: `git log --notes=mesh-plan`.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Blocking fault under issue 774 (design 47, L3), a group of three with mesh-delivery and mesh-tools on branch fix/l3-words-after-judge.
What is broken (live since 2026-11-03 21:16). The running indexer (old build) refuses manifests carrying core-credentials (nats, mesh-provisioner, mesh-provisioner-client) and tool-runner (node-tools); the grants part holds the bus user list, so no new build gets a grant and the new indexer is held. Nothing new is delivered.
This member. Removes core-credentials from those three manifests; the running parts fall back to their name lists (node-engine CoreCredentialModules; the vault holds no list). The word comes back right after the new indexer runs.
Quick or thorough. Quick now (every delivery blocked); thorough on issue 1585 note 42.
Reviewed-by: mesh-code-reviewer@shanks at
f2eb548204Pushed-by: lead-47@shanks
https://claude.ai/code/session_01JG73KG7AfSdh6FP8VrBqCn
Delivery
novox/mesh-catalog@f2eb54820469— merged since 2026-11-03T21:09:05ZSource — source.main moved to novox/mesh-catalog@be24f5ac38. Whether it reached the machines is
mesh-delivery-view's, derived fromsource.main, the wants and the haves.Group
fix/l3-words-after-judge: novox/mesh-catalog@f2eb548204, novox/mesh-delivery@e3ce4b095c, novox/mesh-tools@40e0e8282bTransitions
The commit's note under
refs/notes/mesh-plankeeps every transition of this change up to its merge:git log --notes=mesh-plan.