jschoubben 1b485eb2aa F-catalog-B: distribution's front takes no bootstrap credential ...

The lead's ENG-5 ruling: on a fresh mesh the bootstrap pushes the holders' own images to the store on its
loopback with no credential, so the front's bootstrap token, its file, the bootstrap-push window and the
program's removal of the file go. Fewer secrets; nothing to refuse once a window closes.

Claude-Session: https://claude.ai/code/session_01JG73KJNrH5EgFXMKKYSrig

2026-11-04 17:05:24 +01:00

..

contract_test.go

A3k finding 2: distribution reads its caller list as mesh-config resolves it, not from an environment nothing renders

2026-11-04 13:54:17 +01:00

contract.go

CAT-D2: distribution's verbs and events speak the two seats' contracts from mesh-contracts

2026-11-04 13:07:14 +01:00

main.go

F-catalog-B: distribution's front takes no bootstrap credential

2026-11-04 17:05:24 +01:00

publishing_test.go

CAT-D5: the publishing builds are written with compare-and-set on the key's revision, so two first publishes at once both count

2026-11-04 13:16:55 +01:00