Merge pull request 'Record a push that only moves recorded builds as the person's word, not a repair (hq issue 301)' (#126) from fix/a-push-of-recorded-builds-is-no-repair into main

internal/link/handacts.go

@@ -43,8 +43,18 @@ type HandAct struct {
 	Cause string `json:"cause"`
 	// Condition is the condition's key the act addresses, when it names one.
 	Condition string `json:"condition,omitempty"`
+	// Kind is what the controller read the act to be from what it did, never a word a person gives:
+	// KindRecordedBuilds for a push that carried only builds a `record` policy held back for a person's
+	// word (novox/hq ADR 0242), empty for everything else. Absent from entries written before it existed.
+	Kind string `json:"kind,omitempty"`
+	// Carried is what such a push moved, one "module from → to" per module, so the log says it.
+	Carried []string `json:"carried,omitempty"`
 }
 
+// KindRecordedBuilds is a push that only moved recorded builds: the person's word their `record` policy
+// asks for, which is no repair (novox/hq ADR 0242, to-be 45 §7).
+const KindRecordedBuilds = "recorded-builds"
+
 // CallerVar carries a seat call's caller to the command the controller runs for it, so an act done
 // through the console says who asked rather than "the controller".
 const CallerVar = "MESH_CALLER"