jschoubben 019614aedc mesh-vault: make a new consumer's first credential whether or not it is handed ...

With the controller gone nothing made the pair row of a new consumer: the vault minted only for a provider
handed to the provisioner (ADR 0349 clause 17's premise, that a holder filled the old way gets the controller's
value). A node composing its own now asks the vault for its credentials (own, ADR 0547 §2, ADR 0550 §5), so the
vault makes the first value of a shared or per-login provision for every holder, create-only (issue 1126; ADR
0570 §6). A remake or a rotation still waits while a holder is filled the old way. A credential asked of the
vault in mesh-provisioner's provisions starts a pass at once, one pass at a time, and vault_status answers each
provider and provision's last outcome as `credentials`.

Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

2026-11-02 15:37:23 +01:00

..

adwaita

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

artifact-store-tools

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

asus-zephyrus-g14

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

audit-logger

Say on every directory how it treats files it does not know, and check it (issue 1024, ADR 0422)

2026-10-17 16:23:03 +00:00

avahi

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

baserow

Say on every directory how it treats files it does not know, and check it (issue 1024, ADR 0422)

2026-10-17 16:23:03 +00:00

blueman

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

bluetooth

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

brother

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

buildah

Design 47's last milestones: the keeper, self-check, healers, hand-acts, provisioner, vault, artifact sweep, disk readings, credential forms (issues 774, 1952, 1953, 1954, 1955)

2026-10-30 02:21:51 +01:00

ca-trust

Say on every directory how it treats files it does not know, and check it (issue 1024, ADR 0422)

2026-10-17 16:23:03 +00:00

claude-code

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

claude-licence-manager

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

clipmenu

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

confluence

Say on every directory how it treats files it does not know, and check it (issue 1024, ADR 0422)

2026-10-17 16:23:03 +00:00

cups

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

dbus

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

desk-channel

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

dev-tools

Take the build agent and the toolchain images out of the catalogue's prose, and refuse the word where it comes back outside the one module still naming it (issue 1295, E6)

2026-10-23 15:34:11 +02:00

disk-load

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

distribution

Design 47's last milestones: the keeper, self-check, healers, hand-acts, provisioner, vault, artifact sweep, disk readings, credential forms (issues 774, 1952, 1953, 1954, 1955)

2026-10-30 02:21:51 +01:00

dmenu

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

dnsmasq

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

docker

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

docker-compose

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

dunst

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

fail2ban

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

feh

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

flatpak

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

fonts

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

forticlient

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

gitea

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

gitlab

Say on every directory how it treats files it does not know, and check it (issue 1024, ADR 0422)

2026-10-17 16:23:03 +00:00

gnome-keyring

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

go

Design 47's last milestones: the keeper, self-check, healers, hand-acts, provisioner, vault, artifact sweep, disk readings, credential forms (issues 774, 1952, 1953, 1954, 1955)

2026-10-30 02:21:51 +01:00

grafana

Say grafana's refused admin password once with its cause, and ask again hourly, not every 30 s (issue 774)

2026-10-30 18:18:16 +01:00

hello-web

Say on every directory how it treats files it does not know, and check it (issue 1024, ADR 0422)

2026-10-17 16:23:03 +00:00

home-assistant

Say on every directory how it treats files it does not know, and check it (issue 1024, ADR 0422)

2026-10-17 16:23:03 +00:00

hostname

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

i3

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

i3status-rust

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

icecast

Say on every directory how it treats files it does not know, and check it (issue 1024, ADR 0422)

2026-10-17 16:23:03 +00:00

influxdb

Design 47's last milestones: the keeper, self-check, healers, hand-acts, provisioner, vault, artifact sweep, disk readings, credential forms (issues 774, 1952, 1953, 1954, 1955)

2026-10-30 02:21:51 +01:00

invoicing

Say on every directory how it treats files it does not know, and check it (issue 1024, ADR 0422)

2026-10-17 16:23:03 +00:00

jira

Say on every directory how it treats files it does not know, and check it (issue 1024, ADR 0422)

2026-10-17 16:23:03 +00:00

kernel

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

keycloak

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

lab

Take the build agent and the toolchain images out of the catalogue's prose, and refuse the word where it comes back outside the one module still naming it (issue 1295, E6)

2026-10-23 15:34:11 +02:00

lemurs

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

letta

Say on every directory how it treats files it does not know, and check it (issue 1024, ADR 0422)

2026-10-17 16:23:03 +00:00

local-model-consumer

Say on every directory how it treats files it does not know, and check it (issue 1024, ADR 0422)

2026-10-17 16:23:03 +00:00

localization

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

logrotate

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

mailu

Design 47's last milestones: the keeper, self-check, healers, hand-acts, provisioner, vault, artifact sweep, disk readings, credential forms (issues 774, 1952, 1953, 1954, 1955)

2026-10-30 02:21:51 +01:00

marrytts

Say on every directory how it treats files it does not know, and check it (issue 1024, ADR 0422)

2026-10-17 16:23:03 +00:00

matrix

Say on every directory how it treats files it does not know, and check it (issue 1024, ADR 0422)

2026-10-17 16:23:03 +00:00

memory-pressure

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

mesh-build-go

Retake a pin whose forge listing failed, naming the forge's cause

2026-11-02 12:52:10 +01:00

mesh-build-image

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

mesh-build-node

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

mesh-catalog

Design 47's last milestones: the keeper, self-check, healers, hand-acts, provisioner, vault, artifact sweep, disk readings, credential forms (issues 774, 1952, 1953, 1954, 1955)

2026-10-30 02:21:51 +01:00

mesh-cli

Record no hand act for a cleanup that deletes nothing

2026-11-02 12:29:56 +01:00

mesh-conditions

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

mesh-config

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

mesh-delivery-gate

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

mesh-files

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

mesh-hand-acts

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

mesh-healers

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

mesh-issues

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

mesh-knowledge

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

mesh-mail

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

mesh-mail-notifier

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

mesh-mail-reader

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

mesh-mail-web

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

mesh-provisioner

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

mesh-provisioner-client

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

mesh-reads

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

mesh-self-check

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

mesh-vault

mesh-vault: make a new consumer's first credential whether or not it is handed

2026-11-02 15:37:23 +01:00

mesh-watcher

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

messenger

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

minio

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

model-usage

Commit the lock files of mssql, mongodb, model-usage and mesh-catalog, and refuse a Node module without one (issue 1868, ADR 0469 §5)

2026-10-22 18:12:32 +02:00

mongodb

Design 47's last milestones: the keeper, self-check, healers, hand-acts, provisioner, vault, artifact sweep, disk readings, credential forms (issues 774, 1952, 1953, 1954, 1955)

2026-10-30 02:21:51 +01:00

mosquitto

Design 47's last milestones: the keeper, self-check, healers, hand-acts, provisioner, vault, artifact sweep, disk readings, credential forms (issues 774, 1952, 1953, 1954, 1955)

2026-10-30 02:21:51 +01:00

mounts

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

mssql

Design 47's last milestones: the keeper, self-check, healers, hand-acts, provisioner, vault, artifact sweep, disk readings, credential forms (issues 774, 1952, 1953, 1954, 1955)

2026-10-30 02:21:51 +01:00

n8n

Keep n8n on its own Dockerfile: since ADR 0487 a module may ship one, and the move to the upstream image only added a config value and a uuid mount (the operator, 2026-10-22)

2026-10-22 11:47:44 +02:00

nats

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

netcheck

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

networkmanager

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

nextcloud

nextcloud: repair the account only on a 401, never reset the throttle (issue 1253, review 2)

2026-10-25 16:57:46 +01:00

nextcloud-client

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

nfs-server

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

nftables

Feature 57 (config and provisioning): release the catalogue, the reviewed release branch merged with main, on top of main

2026-10-16 09:42:45 +00:00

nm-applet

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

node-env

Say on every directory how it treats files it does not know, and check it (issue 1024, ADR 0422)

2026-10-17 16:23:03 +00:00

nodejs

Design 47's last milestones: the keeper, self-check, healers, hand-acts, provisioner, vault, artifact sweep, disk readings, credential forms (issues 774, 1952, 1953, 1954, 1955)

2026-10-30 02:21:51 +01:00

nodered

Say on every directory how it treats files it does not know, and check it (issue 1024, ADR 0422)

2026-10-17 16:23:03 +00:00

ollama

Design 47's last milestones: the keeper, self-check, healers, hand-acts, provisioner, vault, artifact sweep, disk readings, credential forms (issues 774, 1952, 1953, 1954, 1955)

2026-10-30 02:21:51 +01:00

only-office

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

openai-consumer

Say on every directory how it treats files it does not know, and check it (issue 1024, ADR 0422)

2026-10-17 16:23:03 +00:00

openrazer

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

pacman

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

photos-eef

Say on every directory how it treats files it does not know, and check it (issue 1024, ADR 0422)

2026-10-17 16:23:03 +00:00

photos-filip

Say on every directory how it treats files it does not know, and check it (issue 1024, ADR 0422)

2026-10-17 16:23:03 +00:00

picom

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

polychromatic

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

postgres

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

power

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

powerlevel10k

Say on every directory how it treats files it does not know, and check it (issue 1024, ADR 0422)

2026-10-17 16:23:03 +00:00

records

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

redis

Design 47's last milestones: the keeper, self-check, healers, hand-acts, provisioner, vault, artifact sweep, disk readings, credential forms (issues 774, 1952, 1953, 1954, 1955)

2026-10-30 02:21:51 +01:00

restic

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

rofi

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

route-adapter

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

screen-lock

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

searxng

Say on every directory how it treats files it does not know, and check it (issue 1024, ADR 0422)

2026-10-17 16:23:03 +00:00

sensors

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

showcase

Design 47's last milestones: the keeper, self-check, healers, hand-acts, provisioner, vault, artifact sweep, disk readings, credential forms (issues 774, 1952, 1953, 1954, 1955)

2026-10-30 02:21:51 +01:00

slack

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

snapd

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

ssh-client

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

sshd

Feature 57 (config and provisioning): release the catalogue, the reviewed release branch merged with main, on top of main

2026-10-16 09:42:45 +00:00

step-ca

Design 47's last milestones: the keeper, self-check, healers, hand-acts, provisioner, vault, artifact sweep, disk readings, credential forms (issues 774, 1952, 1953, 1954, 1955)

2026-10-30 02:21:51 +01:00

sudo

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

supabase

Say on every directory how it treats files it does not know, and check it (issue 1024, ADR 0422)

2026-10-17 16:23:03 +00:00

systemd

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

systemd-networkd

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

systemd-resolved

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

telegram

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

time-sync

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

triggerhappy

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

umami

Design 47's last milestones: the keeper, self-check, healers, hand-acts, provisioner, vault, artifact sweep, disk readings, credential forms (issues 774, 1952, 1953, 1954, 1955)

2026-10-30 02:21:51 +01:00

unifi

Say on every directory how it treats files it does not know, and check it (issue 1024, ADR 0422)

2026-10-17 16:23:03 +00:00

website

Say on every directory how it treats files it does not know, and check it (issue 1024, ADR 0422)

2026-10-17 16:23:03 +00:00

xclip

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

xdg

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

xorg

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

xterm

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

zfs

Pin mesh-sdk to the group head of issue 1126

2026-11-02 12:29:57 +01:00

zsh

Say on every directory how it treats files it does not know, and check it (issue 1024, ADR 0422)

2026-10-17 16:23:03 +00:00

zsh-autosuggestions

Feature 57 (config and provisioning): release the catalogue, the reviewed release branch merged with main, on top of main

2026-10-16 09:42:45 +00:00

zsh-syntax-highlighting

Feature 57 (config and provisioning): release the catalogue, the reviewed release branch merged with main, on top of main

2026-10-16 09:42:45 +00:00