mesh-controller

3 Commits

Include renames

Author	SHA1	Message	Date
jschoubben	4ee131e990	Let the controller ask an issued credential's tool in its own name, and seal it again over a remade pair (hq issue 526, ADR 0305) mesh/merge-gate pass: builds build-agent, mesh-controller, route-proxy → ace, g14, novox, shanks; no bus step; every machine composes with the change as it… Details mesh/repo-check pass: its merge-check.sh passed Details mesh/delivery delivered Details mesh/delivery-group group feat/526-a-provider-delivers-what-its-software-issued delivered: every member is delivered Details The bus left the controller out of the caller-named grants, so issued could never reach plex's tool; the controller is now granted exactly the tools of offers whose software issues the credential, composed from the records, so the installer's first user list is unchanged. A pair remade on a key change or accepted by hand kept the issued stamp and was never sealed again; those writes now clear it.	2026-10-12 01:21:20 +02:00
jschoubben	faf8b76b84	Cite ADR 0305's clauses by their accepted-for-review numbers (issue 526) mesh/merge-gate pass: builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step; every machine composes with the change as it did without … Details mesh/repo-check pass: its merge-check.sh passed Details mesh/delivery superseded: a newer head of the same pull request Details	2026-10-12 01:09:26 +02:00
jschoubben	db86dd52c8	Take a provider's software-issued credential from the provider, sealed (hq issue 526, ADR 0305) mesh/delivery-group group feat/526-a-provider-delivers-what-its-software-issued rejected: a member's own check failed Details mesh/delivery superseded: a newer head of the same pull request Details mesh/merge-gate pass: builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step; every machine composes with the change as it did without … Details mesh/repo-check pass: its merge-check.sh passed Details A token a media server got from its vendor reached its consumers only as a value the mesh minted, which the server refused, or as a copy typed by hand. An offer may now say its software issues the credential; the new issued verb carries no value and asks the provider's tool, in the controller's own name, for the value sealed to one call, then seals it to every pair that does not hold it yet.	2026-10-12 01:07:16 +02:00