Judge a definition's resolved paths where the definition is judged, by the node-engine's own rules, so a refusal never freezes a machine (review of #228, issue 496)

2026-10-11 18:59:07 +02:00
parent 93289dc88b
commit 8115f1ac42
7 changed files with 800 additions and 136 deletions
@@ -25,3 +25,11 @@ and write the commits here. The SDK is captured at the commit go.mod pins for gi

  rm -rf testdata/beside/mesh-sdk && mkdir -p testdata/beside/mesh-sdk
  git -C ../mesh-sdk archive <commit> conformance/events | tar -x -C testdata/beside/mesh-sdk
+
+And from mesh-host at the same commit as its line above, the node-engine's placement guard, which
+internal/catalogue's engine_guard_test.go holds the controller's resolved-path rules to (novox/hq issue 496),
+kept as .captured so no Go tool reads it as this repository's code:
+
+  mkdir -p testdata/beside/mesh-host/internal/apply
+  git -C ../mesh-host show <commit>:internal/apply/placement_guard.go \
+    > testdata/beside/mesh-host/internal/apply/placement_guard.go.captured