Feature 57 (config and provisioning): release mesh-controller, the reviewed release branch merged with main, on top of main

cmd/mesh-controller/handacts.go

@@ -105,6 +105,12 @@ var handActVerbs = []handActVerb{
 	// (ADR 0257).
 	{Verb: "mirrors", Decision: "which copies in the store no record names are the mesh's is a person's " +
 		"word (ADR 0257)"},
+	// A move of data a release runs once after its delivery (design 57): a person's step of the release, never a
+	// repair.
+	{Verb: "move-placement", Decision: "a release's move of data runs once after its delivery, on a person's " +
+		"word (design 57, issue 736)"},
+	{Verb: "move-config", Decision: "a release's move of data runs once after its delivery, on a person's " +
+		"word (design 57, issue 664)"},
 	{Verb: "bus upgrade", Decision: "the bus is never rolled by the mesh: replacing it is a planned step a " +
 		"person starts (ADR 0236)"},
 	{Verb: "upgrade release-backlog", Decision: "after a release plan failed, the next opens only when a " +
@@ -118,6 +124,9 @@ var handActVerbs = []handActVerb{
 	{Verb: "secret accept", Decision: "a value an outside party issued is given by a person, at their desk"},
 	{Verb: "secret rotate", Decision: "a value a person judged disclosed is replaced on their word",
 		DecidedFor: []string{causeLeakedInLogs}},
+	// A provider's credential the vault holds, rotated there on a person's word (issue 767): the same judgement.
+	{Verb: "rotate", Decision: "a value a person judged disclosed is replaced on their word",
+		DecidedFor: []string{causeLeakedInLogs}},
 }
 
 // personsDecision is whether an act in the log is a person's decision by design, by the verb that