6 Commits

Include renames

Author	SHA1	Message	Date
jschoubben	758c8e84e5	Bound the build seats' workers' deliveries, so an ask no run ends is offered at most five times even when the holder that says it is poison dies too (issue 1907)	2026-10-23 16:42:13 +02:00
jschoubben	5ca4f14479	Derive a worker per kind for the build seats and grant their users to put asks, so a build node pulls delivery, check and recheck in order and a session cannot ask (issue 1887 A6, ADR 0525 §2)	2026-10-23 15:54:45 +02:00
jschoubben	499ff5c218	Move the route proxy into its module and run it from the trust image, on mesh-sdk's public membership (issues 1633, 1634, 1635) ... A bundle is built only from its module's directory (ADR 0480 clause 4), so the proxy leaves examples/ and the controller's internal/broker; the broker keeps no second copy of what the proxy shares with mesh-sdk. The image and its Dockerfile go, and a test holds that only build-agent declares one (clause 11).	2026-10-22 09:53:56 +02:00
jochen	9372e80cec	Serve a trusted holder from a runtime of its own account, refuse it in the machine's runtime, and say while an agent can become root where it runs (hq ADR 0259 §8)	2026-10-09 13:48:56 +02:00
jochen	c9be75b13e	Carry a channel's capabilities on its claim and tell the router every kind, so an answer is judged by the controller's record and not the channel's word	2026-10-09 13:48:56 +02:00
jochen	f5f315cc95	Grant a seat's traffic by caller and by kind, so an ask's asker and a channel's kind are facts the bus enforces (hq ADR 0259)	2026-10-09 13:48:56 +02:00