Files

T

jschoubben 1bdca045c2 F-catalog-B: distribution removes a tagged version's tag alone when another tag names its digest

Deleting the manifest by its digest removed every tag on it, and reproducible builds share a digest
between a branch's tagged version and the trunk's numbered one, so a branch's end deleted the trunk's
image (security review F1). The fake catalog now deletes by digest as the store does; a store that
cannot delete a tag alone removes nothing and the removal is refused.

Claude-Session: https://claude.ai/code/session_01JG73KJNrH5EgFXMKKYSrig

2026-11-04 17:04:46 +01:00

cmd

A release of nothing held answers released false; the sweep names retention from the seat

2026-11-04 16:33:14 +01:00

internal/holder

F-catalog-B: distribution removes a tagged version's tag alone when another tag names its digest

2026-11-04 17:04:46 +01:00

go.mod

CAT-D2: distribution's verbs and events speak the two seats' contracts from mesh-contracts

2026-11-04 13:07:14 +01:00

go.sum

CAT-D7: distribution's whole-module integration test against a real bus

2026-11-04 13:01:15 +01:00

module.json

A3k finding 2: distribution reads its caller list as mesh-config resolves it, not from an environment nothing renders

2026-11-04 13:54:17 +01:00

README.md

Say on every directory how it treats files it does not know, and check it (issue 1024, ADR 0422)

2026-10-17 16:23:03 +00:00

README.md

distribution

The distribution module of the mesh catalogue: runs the container image registry; claims the seat mesh-artifact-store.

Files it does not know

Each directory or archive this module declares says how it treats a file it did not write (ADR 0422, ADR 0416).

/var/lib/mesh/registry: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).
/var/lib/mesh-registry: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).