6 Commits

Include renames

Author	SHA1	Message	Date
jschoubben	758c8e84e5	Bound the build seats' workers' deliveries, so an ask no run ends is offered at most five times even when the holder that says it is poison dies too (issue 1907)	2026-10-23 16:42:13 +02:00
jschoubben	5ca4f14479	Derive a worker per kind for the build seats and grant their users to put asks, so a build node pulls delivery, check and recheck in order and a session cannot ask (issue 1887 A6, ADR 0525 §2)	2026-10-23 15:54:45 +02:00
jschoubben	4c375dafed	Judge a machine root-free only on a positive, fresh measure, and believe a verified sender only there (hq ADR 0259 §8, review H2/H3) ... The agent-root probe read the sudo module's answer, given in the machine's runtime as the very account an agent could become, and took a missing account, a missing answer or no accounts as a pass. One judgement now decides: the machine names an agent account its node-engine judged unable to become root within 15 minutes (agentConfined, mesh-controller #164), and the login shell's execute is not served there; anything not read is not free. The probe raises agent-root on it, the new root-free verb answers it live for the router, and a push composes verified-sender for a kind only while its machine and the router's pass it.	2026-10-09 13:48:56 +02:00
jochen	9372e80cec	Serve a trusted holder from a runtime of its own account, refuse it in the machine's runtime, and say while an agent can become root where it runs (hq ADR 0259 §8)	2026-10-09 13:48:56 +02:00
jochen	c9be75b13e	Carry a channel's capabilities on its claim and tell the router every kind, so an answer is judged by the controller's record and not the channel's word	2026-10-09 13:48:56 +02:00
jochen	f5f315cc95	Grant a seat's traffic by caller and by kind, so an ask's asker and a channel's kind are facts the bus enforces (hq ADR 0259)	2026-10-09 13:48:56 +02:00