jschoubben bb18541469 The vault reads each plan from mesh-provisioner, says each credential's outcome in its own bound state, mints nothing for form none, and answers rotate and issued for any proven caller (issue 1954) ...

Each outcome names the value by the vault's own name and generation, never the value; held is provided, issued or given waits, an entry goes only on a retiring key's Approve. The vault no longer reads the controller's assignments, so it leaves the list of their readers. Pins mesh-sdk 6b8c694.

2026-10-29 22:58:53 +01:00

..

agenthome

mesh-build-go: a reads-outside marker lists what its tests read, so its package is kept until one of those files changes (issue 1936)

2026-10-26 22:02:58 +01:00

config

mesh-build-go: a reads-outside marker lists what its tests read, so its package is kept until one of those files changes (issue 1936)

2026-10-26 22:02:58 +01:00

credentialform

checks/credentialform: a module that provides and keeps a bound state must be read by mesh-provisioner (issue 1952)

2026-10-29 22:50:06 +01:00

deps

mesh-build-go: a reads-outside marker lists what its tests read, so its package is kept until one of those files changes (issue 1936)

2026-10-26 22:02:58 +01:00

failurekit

Hold every build module to ending what a previous process left running (issue 1890)

2026-10-27 01:22:13 +01:00

handacts

Refuse a manifest that records into the controller's hand-act log, naming the recorders' fallbacks until the lease write (issue 1953)

2026-10-29 22:41:29 +01:00

health

Every offer of twenty providers says its credential form; a check refuses one that does not; re-pin sdk 6b8c694 (issue 1952)

2026-10-29 22:49:41 +01:00

imagebuild

mesh-build-go: a reads-outside marker lists what its tests read, so its package is kept until one of those files changes (issue 1936)

2026-10-26 22:02:58 +01:00

imageplace

mesh-build-go: a reads-outside marker lists what its tests read, so its package is kept until one of those files changes (issue 1936)

2026-10-26 22:02:58 +01:00

locks

mesh-build-go: a reads-outside marker lists what its tests read, so its package is kept until one of those files changes (issue 1936)

2026-10-26 22:02:58 +01:00

mailstore

mesh-build-go: a reads-outside marker lists what its tests read, so its package is kept until one of those files changes (issue 1936)

2026-10-26 22:02:58 +01:00

nobinaries

Widen the no-binaries check to every tracked file: a program under checks/ is refused too

2026-10-28 12:17:21 +01:00

noplacement

The vault reads each plan from mesh-provisioner, says each credential's outcome in its own bound state, mints nothing for form none, and answers rotate and issued for any proven caller (issue 1954)

2026-10-29 22:58:53 +01:00

noscripts

mesh-build-go: a reads-outside marker lists what its tests read, so its package is kept until one of those files changes (issue 1936)

2026-10-26 22:02:58 +01:00

owned

mesh-build-go: a reads-outside marker lists what its tests read, so its package is kept until one of those files changes (issue 1936)

2026-10-26 22:02:58 +01:00

particulars

Particulars check: skip the real-catalogue test when the checker hands no node names yet (ADR 0567 §16)

2026-10-28 18:53:44 +01:00

paths

mesh-build-go: a reads-outside marker lists what its tests read, so its package is kept until one of those files changes (issue 1936)

2026-10-26 22:02:58 +01:00

predefined

mesh-build-go: a reads-outside marker lists what its tests read, so its package is kept until one of those files changes (issue 1936)

2026-10-26 22:02:58 +01:00

secrets

mesh-build-go: a reads-outside marker lists what its tests read, so its package is kept until one of those files changes (issue 1936)

2026-10-26 22:02:58 +01:00

sshdir

mesh-build-go: a reads-outside marker lists what its tests read, so its package is kept until one of those files changes (issue 1936)

2026-10-26 22:02:58 +01:00

templates

mesh-build-go: a reads-outside marker lists what its tests read, so its package is kept until one of those files changes (issue 1936)

2026-10-26 22:02:58 +01:00

toolchains

mesh-build-go: a reads-outside marker lists what its tests read, so its package is kept until one of those files changes (issue 1936)

2026-10-26 22:02:58 +01:00

trunk

mesh-build-go: a reads-outside marker lists what its tests read, so its package is kept until one of those files changes (issue 1936)

2026-10-26 22:02:58 +01:00

words

Retire the spelling catalogue: the words check lists it and skips module paths in imports

2026-10-28 12:17:21 +01:00