Test the controller's seal under a silent vault, the bus machine's refusal and a served fact that says a setting (issues 1385, 1383, 1382)

cmd/mesh-controller/compose_perform_integration_test.go

@@ -146,17 +146,31 @@ func TestPerformMakesTheOwnSecretsAndThePairCredentialsTheCompositionNamed(t *te
 	}
 }
 
-// 1385/AC3: with the vault unreachable and no box of the credential kept, the send fails naming the module, and composes
-// nothing to send.
-func TestAVaultThatIsSilentRefusesTheSendWhereNoBoxIsKept(t *testing.T) {
+// 1385/AC3 (the lead's answer 1): with the vault unreachable and no box of the credential kept, the send carries the
+// controller's own seal for it (ADR 0396), says so as a condition, and keeps no box.
+func TestAVaultThatIsSilentSealsTheSendByTheControllerWhereNoBoxIsKept(t *testing.T) {
 	open, vault := aCoreMesh(t, link.VaultBoxContract)
 	vault.silent = errors.New("no responders")
 	declared, err := composeSend(t.Context(), open, "laptop")
-	if err == nil || !strings.Contains(err.Error(), "mesh-provisioner-client") {
-		t.Fatalf("the send was not refused, naming the module: %v", err)
+	if err != nil {
+		t.Fatalf("the send is refused: %v", err)
 	}
-	if len(declared.Resources) != 0 {
-		t.Fatal("a declaration came with the refusal")
+	f := clientsBroker(declared.Resources)
+	if f == nil || f["sealed"] == nil || f[catalogue.VaultSealedField] != nil {
+		t.Fatalf("the core credential is composed as %v: the controller's own seal, until the vault holds it", f)
+	}
+	if len(declared.foreseen) != 0 {
+		t.Fatalf("the declaration still names %v foreseen", declared.foreseen)
+	}
+	if c, found := vaultSilence(t, "laptop"); !found || !strings.Contains(c.Summary, "sealed by the controller until the vault holds it") {
+		t.Fatalf("no condition says why: %+v", c)
+	}
+	kept, err := open.inventory.KeptCoreBoxes(t.Context(), "laptop")
+	if err != nil {
+		t.Fatal(err)
+	}
+	if len(kept["mesh-provisioner-client"]) != 0 {
+		t.Fatalf("a box was kept for a credential the vault never boxed: %v", kept)
 	}
 }