The routing record is 0066, not 0056

0056 is 'the authority is the control plane, not a database'. A citation
pointing at the wrong decision is worse than none: it reads as corroboration.

Claude-Session: https://claude.ai/code/session_01LrgweAeERJYBg88c5cKDzF

cmd/mesh-control/nodes.go

@@ -66,7 +66,7 @@ func nodeCommand(ctx context.Context, args []string) error {
 		return nil
 
 	case "public-domain":
-		// The domain this node composes its routed names under (novox/hq ADR 0056).
+		// The domain this node composes its routed names under (novox/hq ADR 0066).
 		//
 		// **The form with no argument reports; clearing is asked for by name.** It used to clear —
 		// so `node public-domain anchor`, which reads like a question and is what anybody types to
@@ -88,7 +88,7 @@ const publicDomainUsage = "node public-domain <name> — what it is now; " +
 //
 // Three forms, and the destructive one is the only one that has to be asked for. Clearing is a
 // real thing to want — a machine that stops facing the outside composes no names, and
-// lab-versus-production is this one setting (novox/hq ADR 0056) — so it keeps a way to say it.
+// lab-versus-production is this one setting (novox/hq ADR 0066) — so it keeps a way to say it.
 // What it does not keep is being the thing that happens when nothing was said at all.
 func publicDomain(ctx context.Context, inv *inventory.Inventory, args []string) error {
 	set := flag.NewFlagSet("node public-domain", flag.ContinueOnError)
@@ -335,7 +335,7 @@ func showNode(ctx context.Context, inv *inventory.Inventory, name string) error
 	fmt.Printf("%s\n", node.Name)
 	fmt.Printf("  last heard from   %s\n", heardFrom(node))
 
-	// The domain its routed names are composed under, when it has one (novox/hq ADR 0056). Shown
+	// The domain its routed names are composed under, when it has one (novox/hq ADR 0066). Shown
 	// only when set: a machine that serves nothing to the outside has no domain, and saying so of
 	// every internal node would be noise.
 	domain, err := inv.PublicDomainOf(ctx, name)

cmd/mesh-control/plan.go

@@ -69,7 +69,7 @@ func planFor(ctx context.Context, open *stores, nodeName string) (catalogue.Reso
 		return catalogue.Resolution{}, nil, err
 	}
 
-	// The domain this node composes its routed names under (novox/hq ADR 0056). A route
+	// The domain this node composes its routed names under (novox/hq ADR 0066). A route
 	// contribution carries only a label; the resolver joins <label>.<public-domain> for this node,
 	// so the fact travels on the node it belongs to rather than being looked up where the name is
 	// composed.
@@ -435,7 +435,7 @@ func declarationWith(ctx context.Context, open *stores, node string,
 		return nil, err
 	}
 
-	// And every routed name → the node that serves it (novox/hq ADR 0056). Alongside the
+	// And every routed name → the node that serves it (novox/hq ADR 0066). Alongside the
 	// `<node>.internal` names above, so a container — or an internal ACME validator — resolves a
 	// routed name to the proxy that serves it, mesh-wide. The mesh publishes the names it was told
 	// to serve and knows nothing about what they mean.
@@ -453,7 +453,7 @@ func declarationWith(ctx context.Context, open *stores, node string,
 }
 
 // routeNamesInTheMesh is every routed name and the address of the node that serves it (novox/hq
-// ADR 0056).
+// ADR 0066).
 //
 // **Mesh-wide, so any container resolves any routed name to its proxy** — including an internal
 // ACME validator, which cannot complete a challenge for a name it cannot reach. A routed name is

cmd/mesh-control/push.go

@@ -313,7 +313,7 @@ type readyNode struct {
 // composeEach works out what each named machine should be, and never lets one machine's answer
 // decide another's.
 //
-// **A machine whose set cannot be worked out is that machine's problem** (novox/hq ADR 0056). A
+// **A machine whose set cannot be worked out is that machine's problem** (novox/hq ADR 0066). A
 // whole-mesh push used to refuse outright when any one node failed to resolve, so a single
 // unanswerable requirement on a single machine — one module requiring a provision nobody had
 // assigned a provider for — left every other machine in the mesh unconverged, including machines