jschoubben e85cf002a4 V-1: the vault serves licence-put, keeping the caller's newest generation ...

A licence's grant and access token move into the vault (ADR 0550 §3), handed in two steps
with a key made for the call, as move-in does; the caller's generation is the record's,
an older one is refused, and secret-changed names the secret and its generation.

Builds: design 39 bus-and-switch §15, B3, B4, B5, B6

Claude-Session: https://claude.ai/code/session_01NcbgfHb9d4T9nq5Q6WqdiJ

2026-11-11 23:07:44 +01:00

..

testdata

Feature 57 (config and provisioning): release the catalogue, the reviewed release branch merged with main, on top of main

2026-10-16 09:42:45 +00:00

.gitignore

Vault: name a hash record's secret in a field called of, so the runtime accepts it

2026-10-26 09:25:35 +01:00

accounts.go

Vault: enrolment token and node account, signing for enrolment, a node's two logins and their rotation, own hand-out of a login

2026-11-02 01:42:19 +01:00

adopt.go

Every module follows the assigner's new places: the contracts' go/ path, mesh-wants in the delivery contracts, the state and tool assignments (issue 1966)

2026-11-05 22:29:07 +01:00

askers.go

Every module follows the assigner's new places: the contracts' go/ path, mesh-wants in the delivery contracts, the state and tool assignments (issue 1966)

2026-11-05 22:29:07 +01:00

assignmentsview_test.go

Every module follows the assigner's new places: the contracts' go/ path, mesh-wants in the delivery contracts, the state and tool assignments (issue 1966)

2026-11-05 22:29:07 +01:00

assignmentsview.go

Every module follows the assigner's new places: the contracts' go/ path, mesh-wants in the delivery contracts, the state and tool assignments (issue 1966)

2026-11-05 22:29:07 +01:00

core_test.go

The bus, the provisioner and its client say their own secrets are the core's credentials, and the vault keeps no list of modules; pinned at mesh-sdk 4f141ff (issue 774, the operator 2026-11-03)

2026-11-03 17:15:06 +01:00

core.go

The bus, the provisioner and its client say their own secrets are the core's credentials, and the vault keeps no list of modules; pinned at mesh-sdk 4f141ff (issue 774, the operator 2026-11-03)

2026-11-03 17:15:06 +01:00

credential_field_test.go

Vault: name a hash record's secret in a field called of, so the runtime accepts it

2026-10-26 09:25:35 +01:00

ended_test.go

mesh-vault reads an ended assignment as a removed key (issue 1098)

2026-10-18 02:37:28 +02:00

enrolment_test.go

Every module follows the assigner's new places: the contracts' go/ path, mesh-wants in the delivery contracts, the state and tool assignments (issue 1966)

2026-11-05 22:29:07 +01:00

enrolment_tools.go

mesh-vault reads signers, node logins, tokens, placement, haves and the handing through the seats' types and clients; its holder names are its own constants (B5g; ADR 0634 §1, §4; issue 1966)

2026-11-05 16:07:00 +01:00

enrolment.go

mesh-vault reads signers, node logins, tokens, placement, haves and the handing through the seats' types and clients; its holder names are its own constants (B5g; ADR 0634 §1, §4; issue 1966)

2026-11-05 16:07:00 +01:00

followups_test.go

Make each sensitive vault verb judge its own caller

2026-11-02 12:29:56 +01:00

form_test.go

mesh-vault: make a new consumer's first credential whether or not it is handed

2026-11-02 15:37:23 +01:00

intake_test.go

Privilege no caller named controller in the vault; match a hand act's verb exactly

2026-11-02 12:29:56 +01:00

intake.go

V-1: the vault serves licence-put, keeping the caller's newest generation

2026-11-11 23:07:44 +01:00

issued_account_test.go

Privilege no caller named controller in the vault; match a hand act's verb exactly

2026-11-02 12:29:56 +01:00

keys.go

Feature 57 (config and provisioning): release the catalogue, the reviewed release branch merged with main, on top of main

2026-10-16 09:42:45 +00:00

ledger_test.go

Feature 57 (config and provisioning): release the catalogue, the reviewed release branch merged with main, on top of main

2026-10-16 09:42:45 +00:00

ledger.go

Feature 57 (config and provisioning): release the catalogue, the reviewed release branch merged with main, on top of main

2026-10-16 09:42:45 +00:00

ledgers_test.go

The wanted accounts' layout leaves mesh-sdk for the grants part's package grantsstate (ADR 0634 section 1, ADR 0635 section 4, issue 1966)

2026-11-05 18:43:21 +01:00

ledgers.go

The wanted accounts' layout leaves mesh-sdk for the grants part's package grantsstate (ADR 0634 section 1, ADR 0635 section 4, issue 1966)

2026-11-05 18:43:21 +01:00

licences_test.go

V-1: the vault serves licence-put, keeping the caller's newest generation

2026-11-11 23:07:44 +01:00

licences.go

V-1: the vault serves licence-put, keeping the caller's newest generation

2026-11-11 23:07:44 +01:00

main.go

Merge main (#617, #618) into the registry milestone (issue 1966)

2026-11-06 00:18:20 +01:00

mint_integration_test.go

Every module follows the assigner's new places: the contracts' go/ path, mesh-wants in the delivery contracts, the state and tool assignments (issue 1966)

2026-11-05 22:29:07 +01:00

mint_test.go

The wanted accounts' layout leaves mesh-sdk for the grants part's package grantsstate (ADR 0634 section 1, ADR 0635 section 4, issue 1966)

2026-11-05 18:43:21 +01:00

mint.go

Every module follows the assigner's new places: the contracts' go/ path, mesh-wants in the delivery contracts, the state and tool assignments (issue 1966)

2026-11-05 22:29:07 +01:00

move_test.go

mesh-vault reads signers, node logins, tokens, placement, haves and the handing through the seats' types and clients; its holder names are its own constants (B5g; ADR 0634 §1, §4; issue 1966)

2026-11-05 16:07:00 +01:00

move.go

The bus, the provisioner and its client say their own secrets are the core's credentials, and the vault keeps no list of modules; pinned at mesh-sdk 4f141ff (issue 774, the operator 2026-11-03)

2026-11-03 17:15:06 +01:00

named_pair_test.go

Feature 57 (config and provisioning): release the catalogue, the reviewed release branch merged with main, on top of main

2026-10-16 09:42:45 +00:00

nodekey_test.go

The bus, the provisioner and its client say their own secrets are the core's credentials, and the vault keeps no list of modules; pinned at mesh-sdk 4f141ff (issue 774, the operator 2026-11-03)

2026-11-03 17:15:06 +01:00

noderotation.go

Every module follows the assigner's new places: the contracts' go/ path, mesh-wants in the delivery contracts, the state and tool assignments (issue 1966)

2026-11-05 22:29:07 +01:00

notyet_test.go

Answer an unreadable assignment as not yet, never a refusal (issue 928)

2026-10-16 19:30:15 +02:00

outcomes_test.go

Design 47's last milestones: the keeper, self-check, healers, hand-acts, provisioner, vault, artifact sweep, disk readings, credential forms (issues 774, 1952, 1953, 1954, 1955)

2026-10-30 02:21:51 +01:00

outcomes.go

No client names a holder: each reader keeps its own constant, held to its manifest (ADR 0625 section 4, issue 1966)

2026-11-05 18:37:28 +01:00

own_issue_test.go

Make the vault ask a software-issuing provider's tool itself for holders that hold nothing (issue 928)

2026-10-16 19:34:11 +02:00

owncalls_test.go

Privilege no caller named controller in the vault; match a hand act's verb exactly

2026-11-02 12:29:56 +01:00

ownissue.go

Make the vault ask a software-issuing provider's tool itself for holders that hold nothing (issue 928)

2026-10-16 19:34:11 +02:00

ownnode_test.go

Every module follows the assigner's new places: the contracts' go/ path, mesh-wants in the delivery contracts, the state and tool assignments (issue 1966)

2026-11-05 22:29:07 +01:00

ownnode.go

Every module follows the assigner's new places: the contracts' go/ path, mesh-wants in the delivery contracts, the state and tool assignments (issue 1966)

2026-11-05 22:29:07 +01:00

ownretire.go

CAT-V1: retire takes ask beside warrant, as the seat definition now has it

2026-11-04 12:12:54 +01:00

owntake.go

Every module follows the assigner's new places: the contracts' go/ path, mesh-wants in the delivery contracts, the state and tool assignments (issue 1966)

2026-11-05 22:29:07 +01:00

pair_test.go

mesh-vault: make a new consumer's first credential whether or not it is handed

2026-11-02 15:37:23 +01:00

pair.go

No client names a holder: each reader keeps its own constant, held to its manifest (ADR 0625 section 4, issue 1966)

2026-11-05 18:37:28 +01:00

perholder_bus_test.go

Feature 57 (config and provisioning): release the catalogue, the reviewed release branch merged with main, on top of main

2026-10-16 09:42:45 +00:00

perholder_test.go

Privilege no caller named controller in the vault; match a hand act's verb exactly

2026-11-02 12:29:56 +01:00

perholder.go

Feature 57 (config and provisioning): release the catalogue, the reviewed release branch merged with main, on top of main

2026-10-16 09:42:45 +00:00

placed_test.go

Every module follows the assigner's new places: the contracts' go/ path, mesh-wants in the delivery contracts, the state and tool assignments (issue 1966)

2026-11-05 22:29:07 +01:00

placed.go

Every module follows the assigner's new places: the contracts' go/ path, mesh-wants in the delivery contracts, the state and tool assignments (issue 1966)

2026-11-05 22:29:07 +01:00

providers_test.go

Feature 57 (config and provisioning): release the catalogue, the reviewed release branch merged with main, on top of main

2026-10-16 09:42:45 +00:00

pulled_in_test.go

Feature 57 (config and provisioning): release the catalogue, the reviewed release branch merged with main, on top of main

2026-10-16 09:42:45 +00:00

reseal_health_test.go

Feature 57 (config and provisioning): release the catalogue, the reviewed release branch merged with main, on top of main

2026-10-16 09:42:45 +00:00

reseal_health.go

Feature 57 (config and provisioning): release the catalogue, the reviewed release branch merged with main, on top of main

2026-10-16 09:42:45 +00:00

retire_test.go

CAT-V1: retire takes ask beside warrant, as the seat definition now has it

2026-11-04 12:12:54 +01:00

retire.go

The vault mints ledger accounts like every kind and keeps a machine's credentials together in its ledgers (issue 1966 V2)

2026-11-03 13:34:27 +01:00

retirement_test.go

Feature 57 (config and provisioning): release the catalogue, the reviewed release branch merged with main, on top of main

2026-10-16 09:42:45 +00:00

retirement.go

Feature 57 (config and provisioning): release the catalogue, the reviewed release branch merged with main, on top of main

2026-10-16 09:42:45 +00:00

rotate_one_test.go

Feature 57 (config and provisioning): release the catalogue, the reviewed release branch merged with main, on top of main

2026-10-16 09:42:45 +00:00

rotation_integration_test.go

Every module follows the assigner's new places: the contracts' go/ path, mesh-wants in the delivery contracts, the state and tool assignments (issue 1966)

2026-11-05 22:29:07 +01:00

rotation.go

Privilege no caller named controller in the vault; match a hand act's verb exactly

2026-11-02 12:29:56 +01:00

sensitive_test.go

Record no hand act for a cleanup that deletes nothing

2026-11-02 12:29:56 +01:00

sensitive.go

Privilege no caller named controller in the vault; match a hand act's verb exactly

2026-11-02 12:29:56 +01:00

signing_test.go

Every module follows the assigner's new places: the contracts' go/ path, mesh-wants in the delivery contracts, the state and tool assignments (issue 1966)

2026-11-05 22:29:07 +01:00

signing.go

Every module follows the assigner's new places: the contracts' go/ path, mesh-wants in the delivery contracts, the state and tool assignments (issue 1966)

2026-11-05 22:29:07 +01:00

store.go

Vault: enrolment token and node account, signing for enrolment, a node's two logins and their rotation, own hand-out of a login

2026-11-02 01:42:19 +01:00

tools_test.go

Every module follows the assigner's new places: the contracts' go/ path, mesh-wants in the delivery contracts, the state and tool assignments (issue 1966)

2026-11-05 22:29:07 +01:00

tools.go

V-1: the vault serves licence-put, keeping the caller's newest generation

2026-11-11 23:07:44 +01:00

vault_test.go

Every module follows the assigner's new places: the contracts' go/ path, mesh-wants in the delivery contracts, the state and tool assignments (issue 1966)

2026-11-05 22:29:07 +01:00

vault.go

V-1: the vault serves licence-put, keeping the caller's newest generation

2026-11-11 23:07:44 +01:00