Judge a machine root-free only on a positive, fresh measure, and believe a verified sender only there (hq ADR 0259 §8, review H2/H3)

The agent-root probe read the sudo module's answer, given in the machine's runtime as the very account
an agent could become, and took a missing account, a missing answer or no accounts as a pass. One
judgement now decides: the machine names an agent account its node-engine judged unable to become
root within 15 minutes (agentConfined, mesh-controller #164), and the login shell's execute is not
served there; anything not read is not free. The probe raises agent-root on it, the new root-free
verb answers it live for the router, and a push composes verified-sender for a kind only while its
machine and the router's pass it.

This commit is contained in:

jschoubben

2026-10-09 12:12:32 +02:00

parent 470f621a1c

commit 54bbf7e76b

9 changed files with 509 additions and 305 deletions

									
										module.json
									
		+1
		
												View File
												
				@@ -72,6 +72,7 @@

				    "retire",

				    "cleanup",

				    "dead-letters",

				    "root-free",

				    "data",

				    "build",

				    "artifacts",