mesh-controller

5 Commits

Include renames

Author	SHA1	Message	Date
jschoubben	faf8b76b84	Cite ADR 0305's clauses by their accepted-for-review numbers (issue 526) mesh/merge-gate pass: builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step; every machine composes with the change as it did without … Details mesh/repo-check pass: its merge-check.sh passed Details mesh/delivery superseded: a newer head of the same pull request Details	2026-10-12 01:09:26 +02:00
jschoubben	db86dd52c8	Take a provider's software-issued credential from the provider, sealed (hq issue 526, ADR 0305) mesh/delivery-group group feat/526-a-provider-delivers-what-its-software-issued rejected: a member's own check failed Details mesh/delivery superseded: a newer head of the same pull request Details mesh/merge-gate pass: builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step; every machine composes with the change as it did without … Details mesh/repo-check pass: its merge-check.sh passed Details A token a media server got from its vendor reached its consumers only as a value the mesh minted, which the server refused, or as a copy typed by hand. An offer may now say its software issues the credential; the new issued verb carries no value and asks the provider's tool, in the controller's own name, for the value sealed to one call, then seals it to every pair that does not hold it yet.	2026-10-12 01:07:16 +02:00
jochen	f8286c063d	rotate: narrow a pair credential to one consuming module (hq issue 268) A machine runs many consumers of one provision, each with its own credential. When one module leaks its credential, `rotate <provision> --consumer <machine>` was the narrowest act and replaced every module's on that machine, restarting all of them. --module (and the verb's module argument beside provision) rotates only that module's.	2026-10-06 02:13:48 +02:00
jschoubben	6ae4ae1dba	A module may hold several secrets from one provider, each a pair of its own secrets: maps a requirement to several files under local names. Each local name is its own need, its own pair credential (the pair is keyed on it: migration 0027), its own file on the consumer, its own holder at the provider (the identity with the local name after it) and rotates apart from the others. The plain shape is unchanged and every existing row is the credential it was (novox/hq 04-ISSUES/069, ADR 0094).	2026-09-21 20:28:16 +02:00
jschoubben	c3b88b9148	Rename mesh-control -> mesh-controller, substrate -> foundation One name per thing, per the HQ glossary: the module/container/image/binary/repo becomes mesh-controller, the seat the-controller, and the store+broker pair the foundation (embedded base bundles, default template and example lock renamed with their go:embed directives). No behaviour change — a pure vocabulary rename. Claude-Session: https://claude.ai/code/session_01D6qtiYU3P9jk3pnAXyAFyx	2026-09-16 18:40:40 +02:00