novox/mesh-controller
6
0
Fork 0
Code Issues Pull Requests 6 Releases Wiki Activity

Let a trusted file that names its keys hold only those keys at the terminal (hq issue 586, ADR 0329 §5)
mesh/merge-gate head 3275a16bebbb merged into trunk 584ee991961c — pass: builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step; every …
Details
mesh/repo-check head 3275a16bebbb merged into trunk 584ee991961c — pass: its merge-check.sh passed
Details
mesh/delivery delivered
Details

Browse Source 
A module with a trusted mergeable file had its whole layer refused through the
settings verb, because such a file took any key. Once a module's files name the
keys they take (ADR 0326), each file takes only those, so only a trusted file's
named keys are the terminal's: betterbird's tags, in a file nothing trusts, is set
through the verb, while its accounts and identities stay the terminal's or the
operator's warrant. A module whose files name no keys keeps the whole-layer rule.
This commit is contained in:
jochen
2026-10-13 05:22:35 +02:00
parent 584ee99196
commit 3275a16beb
4 changed files with 79 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testdata/store-tests
Vendored
+1
View File
@@ -40,3 +40,4 @@
./internal/inventory TestAStoredBuildWithASilentMergeableFileIsStillReadAndComposed
./cmd/mesh-controller TestPlanAndNodeListAnOptionalRequirementLeftUnbound
./cmd/mesh-controller TestReplay340
./cmd/mesh-controller TestOnlyATrustedFilesNamedKeyIsRefusedThroughAVerb