Judge a machine root-free only on a positive, fresh measure, and believe a verified sender only there (hq ADR 0259 §8, review H2/H3)

The agent-root probe read the sudo module's answer, given in the machine's runtime as the very account
an agent could become, and took a missing account, a missing answer or no accounts as a pass. One
judgement now decides: the machine names an agent account its node-engine judged unable to become
root within 15 minutes (agentConfined, mesh-controller #164), and the login shell's execute is not
served there; anything not read is not free. The probe raises agent-root on it, the new root-free
verb answers it live for the router, and a push composes verified-sender for a kind only while its
machine and the router's pass it.

This commit is contained in:

jschoubben

2026-10-09 13:48:56 +02:00

parent e2a45b18ba

commit 4c375dafed

9 changed files with 509 additions and 305 deletions

									
										module.json
									
		+1
		
												View File
												
				@@ -72,6 +72,7 @@

				    "retire",

				    "cleanup",

				    "dead-letters",

				    "root-free",

				    "data",

				    "build",

				    "artifacts",