The holder answers publish and publish-part into incoming (parts of at most 1 MiB, resumed from what is held, hashed, only the missing layers sent, 20 GiB with its 80 % finding and a refusal at the cap, a transfer idle 24 hours dropped), asks builder_versions before it stores, and says published or refused (design 51 *Publishing*, ADR 0605 §4, ADR 0611). versions, remove (a tagged version; untagged only for the sweep's retention, which a hold keeps), hold and release (ADR 0617 §2: the sweep alone; the operator's session by hand; never distribution's own account), tags and mirror. The caller list is a trusted config value checked against the caller the tool runner proved. The store's port is the program's: reads open, writes refused but while the direct-write window is open (never over a tag published through the seat) or with the bootstrap's one-off credential. The old-name and direct-write windows read every node, away ones included, close once, and name a node holding them seven days. Claude-Session: https://claude.ai/code/session_01JG73KJNrH5EgFXMKKYSrig
distribution
The distribution module of the mesh catalogue: runs the container image registry; claims the seat mesh-artifact-store.
Files it does not know
Each directory or archive this module declares says how it treats a file it did not write (ADR 0422, ADR 0416).
/var/lib/mesh/registry: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2)./var/lib/mesh-registry: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).