100 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
mesh-adminandClaude Opus 5.5	2bee290eea	Keep judge builds warm in the build agent's judge cache, and leave nothing on the host ... Review of #329: a judge's home made with a temporary directory inside the build agent is resolved on the host by the container runtime, leaving a cold cache behind on every check, and a kept judge was lost on every redeploy. Judge builds now use the judge cache the build agent declares (MESH_JUDGE_CACHE), mounted into judge builds only: one warm Go cache, the kept judges, and a fresh home per check removed after it (hq ADR 0358 §6, issue 704, issue 482). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-14 13:53:05 +00:00
mesh-adminandClaude Opus 5.5	b7084a19e9	Build every judge where no pull request can reach, and never read mesh-lab at a release ... Review of #329: a judge built with HOME in the workspace runs git under a configuration a pull request's script can plant, so a hook could rewrite the judge's sources before they compile and the result be kept under an honest key (issue 482, issue 704). Every judge now builds with its own HOME, configuration and Go cache outside the workspace, no git configuration and no VCS stamping. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-14 13:30:46 +00:00
mesh-adminandClaude Opus 5.5	48b2906b5c	Keep mesh-lab at its trunk and build the release judge with a cache of its own ... Review of #329: mesh-lab's replays run with the container runtime's socket, so a same-named branch must never be what runs there; the shared Go cache and HOME are writable by a pull request's own script, so the judge kept for a head must not be built from them (issue 704, issue 482). A forge answer naming no branch is an error, and a trunk is the branch a repository follows, not a name. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-14 13:13:30 +00:00
mesh-adminandClaude Opus 5.5	ea7d91bff1	Say which validator judged a release-branch check, and prove clause 5 ... ADR 0358 version 4 asks the verdict to say whether mesh-host's release-branch validator or the vendored one judged, and checks that a release branch's own pull request into its trunk is judged as any trunk pull request (issue 704). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-14 12:56:55 +00:00
mesh-adminandClaude Opus 5.5	4a75cc51dd	Judge a pull request into a release branch by that branch's controller and repositories ... A release branch could never carry a change that needs another repository's release-branch change: its pull requests were judged by the running controller and against the other repositories' main (hq issue 704, ADR 0358). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-14 12:48:44 +00:00
mesh-admin	535c7641ac	Merge pull request 'A fresh check keeps a build whose key is unchanged instead of building it again (hq issue 703)' (#328) from fix/703-a-fresh-check-keeps-an-unchanged-build into main	2026-10-14 08:15:56 +00:00
mesh-admin	04730b54a8	Merge pull request 'S9 raises every bus user's slow consumer and closed connection, from the bus module's events (hq issue 270, ADR 0357)' (#326) from fix/270-the-bus-module-says-every-users-slow-consumer into main	2026-10-14 07:14:33 +00:00
mesh-admin	3479a35462	Merge pull request 'List the provider-hold tests among the store tests (hq issue 145, to-be 48 Phase C)' (#319) from fix/145-a-consumer-is-held-under-its-provider into main	2026-10-14 05:18:00 +00:00
mesh-admin	2959c81435	Merge pull request 'Link a build's bases into its repository before pushing it (issue 694)' (#318) from fix/694-a-push-holds-its-bases into main	2026-10-14 01:19:24 +00:00
mesh-admin	df9e5728a9	Merge pull request 'Try a pushed branch on the build seat before its pull request (hq issue 686)' (#314) from fix/686-a-branch-is-tested-before-its-pull-request into main	2026-10-14 00:57:46 +00:00
mesh-admin	2d18f438c5	Merge pull request 'A no-move tier waits for no new report, so its walk asks the next tier (issue 648)' (#309) from fix/648-a-no-move-tier-waits-for-nothing into main	2026-10-14 00:32:47 +00:00
mesh-admin	ca3f43c400	Merge pull request 'The rest go at once after the first passes, and a gate survives a new controller (hq ADR 0353)' (#312) from fix/the-rest-in-parallel-and-gates-survive-a-new-controller into main	2026-10-13 23:43:02 +00:00
mesh-admin	1601cb1743	Merge pull request 'A walk's first-machine gate waits for a busy container, and mesh-builder busy drains the agent (issue 594, hq ADR 0335)' (#283) from feat/335-a-busy-container-is-replaced-when-idle into main	2026-10-13 22:20:55 +00:00
mesh-admin	72214ae989	Merge pull request 'One build per change: the check builds what its merge moves, the walk takes it by key (ADR 0350, issue 649)' (#311) from feat/350-one-build-per-change into main	2026-10-13 21:30:25 +00:00
mesh-admin	372faebf28	Merge pull request 'The controller passes its first-node gate on one reading (ADR 0351)' (#310) from feat/351-the-controller-passes-on-one-reading into main	2026-10-13 21:14:27 +00:00
mesh-admin	bff5b7f0e4	Merge pull request 'A settings proposal reads at a glance, its values whole where the sender is proven (issues 383 and 639)' (#304) from fix/383-an-ask-reads-at-a-glance into main	2026-10-13 19:22:06 +00:00
mesh-admin	cef22a2526	Merge pull request 'A provider serves its consumers its own composed names (ADR 0346, issue 624)' (#306) from feat/346-a-provider-serves-its-own-names into main	2026-10-13 19:11:16 +00:00
mesh-admin	332fbaa9b1	Merge pull request 'settings: no layer replaces a value the vault fills, at any depth (issue 610)' (#308) from fix/610-no-layer-replaces-a-vault-secret into main	2026-10-13 18:33:41 +00:00
mesh-admin	bf6beec465	settings: no layer replaces a value the vault fills, at any depth (issue 610) ... A mergeable file's protected keys were checked at the top level only, so a layer could still set searxng's server.secret_key under the server key its file takes. The merge now refuses any layer value that would replace a ${secret:} placeholder in the file's own content, at any depth, whatever the module's protected list says.	2026-10-13 17:43:24 +00:00
mesh-admin	9f3aa91e81	Merge pull request 'List the settings walk's store tests, and drop a refusal check that never matched (issue 641 review)' (#307) from fix/641-list-the-settings-store-tests into main	2026-10-13 17:35:00 +00:00
mesh-admin	8ddf8b7005	Merge pull request 'Send an approved settings layer by a walk at once, so the operator's Approve takes effect (issue 641, ADR 0344)' (#305) from fix/641-an-approved-setting-is-sent into main	2026-10-13 17:22:20 +00:00
mesh-admin	6f1a05366c	Merge pull request 'Admit a port from the machine's own local network, and never a public subnet (issue 154, ADR 0340)' (#299) from fix/154-local-network into main	2026-10-13 13:07:11 +00:00
mesh-admin	0a1dc5f93f	Merge pull request 'seat: a push to a named machine waits for the machine's answer, so its call says how it went (issue 629)' (#301) from fix/629-a-push-says-how-it-went into main	2026-10-13 12:44:51 +00:00
mesh-admin	ae0b384497	push-wait is untrusted, so it is set in one call like any preference (issue 629) ... The gate warned that the push file asks for a setting without saying whether it is trusted, which makes push-wait terminal-only.	2026-10-13 12:38:31 +00:00
mesh-admin	f3875a6b60	Merge pull request 'catalogue: say in the comments that a package may be declared by several modules (issue 628)' (#300) from fix/628-packages-are-shared into main	2026-10-13 12:38:30 +00:00
mesh-admin	f09c5ebdec	push: the wait is the call's or the controller's setting push-wait, never a length in the code (issue 629) ... The operator's rule: a wait is never hard-coded, at most a default is configured. The push verb takes `wait`; without it the controller's setting `push-wait` (module default 2m) applies; a setting that cannot be read waits for nothing, as a push did before, and says so.	2026-10-13 12:09:43 +00:00
mesh-admin	6d2e4c299a	seat: a push to a named machine waits for the machine's answer, so its call says how it went (issue 629) ... The seat ran `push <node> --wait 0`, so a push's call ended at "sent" and nobody learned whether the machine applied it. The caller is answered before a push starts (answersFirst, issue 265), so waiting holds nobody: the call now waits up to two minutes for the machine's own report and keeps it, applied, refused with the machine's reason, or each failed resource with its error.	2026-10-13 12:03:53 +00:00
mesh-admin	b654b320a1	catalogue: say in the comments that a package may be declared by several modules (issue 628) ... The resolver follows ADR 0303, but four comments still stated ADR 0210's retired rule that two modules declaring one package collide, and an agent took them as the rule. What stays exclusive is what a module owns: a path, a unit, a name, and a package declared present by one module and absent by another.	2026-10-13 11:52:17 +00:00
mesh-admin	584aa2d7d7	Merge pull request 'Never make a credential only a person can give, and give it once per provider (hq issue 164, ADR 0337)' (#298) from fix/164-an-accepted-credential-is-never-minted into main	2026-10-13 09:52:07 +00:00
mesh-admin	404b4409e7	Merge pull request 'A built module keeps its build edges: a new SDK plans the toolchain and its TypeScript bundles (hq issue 614)' (#296) from fix/614-a-built-module-keeps-its-build-edges into main	2026-10-13 09:35:26 +00:00
mesh-admin	1826b68a22	Merge pull request 'Say which modules a walk left unchanged, so a merge that moved nothing is not read as stranded (hq issue 611)' (#295) from fix/611-an-unchanged-build-is-delivered into main	2026-10-13 08:25:45 +00:00
mesh-admin	a688dcff39	Merge pull request 'Add the replay of issue 239: a module's name is not taken over by another repository (hq issue 239)' (#294) from fix/239-replay into main	2026-10-13 05:37:08 +00:00
mesh-admin	8f1aec0832	Merge pull request 'Add the replay of issue 363: a README-only merge made a new digest of an unchanged Go program (hq issue 363)' (#293) from fix/363-replay into main	2026-10-13 05:08:13 +00:00
mesh-admin	cd6757f1e3	Merge pull request 'Stamp no commit into a Go bundle, so one build source is one digest (hq issue 363, ADR 0267 rule 6)' (#292) from fix/363-a-go-bundle-does-not-vary-with-its-commit into main	2026-10-13 04:59:09 +00:00
mesh-admin	1d244d5aa2	Merge pull request 'Add the replay of issue 348, and refuse bind-dynamic now the catalogue binds once (hq issue 348)' (#291) from fix/348-replay into main	2026-10-13 04:39:40 +00:00
mesh-admin	e0d69ab7a0	Merge pull request 'mesh-builder: read the genesis document until the registry binds, and refuse a registry build with neither (hq issue 121, ADR 0336)' (#289) from fix/121-genesis-package-registry into main	2026-10-13 04:22:05 +00:00
mesh-admin	b12c4b82e8	Merge pull request 'Add the replay of issue 349: a merge acted on late superseded the merge after it (hq issue 349)' (#290) from fix/349-replay into main	2026-10-13 03:54:10 +00:00
mesh-admin	1c9bc9cf00	Merge pull request 'Let a trusted file that names its keys hold only those keys at the terminal (hq issue 586, ADR 0329 §5)' (#286) from fix/586-a-named-key-is-trusted-alone into main	2026-10-13 03:38:13 +00:00
mesh-admin	584ee99196	Merge pull request 'Add the replay of issue 340: a verb set what every agent session obeys (hq issue 340)' (#288) from fix/340-replay into main	2026-10-13 01:04:46 +00:00
mesh-admin	49102e1645	Merge pull request 'Add the replays of issues 279 and 412 (hq issues 279, 412)' (#285) from fix/279-412-replays into main	2026-10-13 00:45:26 +00:00
mesh-admin	eb7ee921b5	Merge pull request 'Replay issue 166 with only what the catalogue had before its fix (for mesh-lab R166)' (#287) from test/166-replay into main	2026-10-13 00:32:48 +00:00
mesh-admin	4473bc7d73	Merge pull request 'Let a requirement be optional, binding only a provider that already runs (hq issue 166, ADR 0330)' (#281) from fix/166-optional-requirement into main	2026-10-13 00:05:33 +00:00
mesh-admin	454a3db69a	Merge pull request 'Refuse a declaring module's mergeable file that names no keys (hq issue 574, ADR 0326 §3)' (#282) from fix/574-a-declaring-module-names-its-files-keys into main	2026-10-12 23:28:21 +00:00
mesh-admin	7b2a9eae80	Merge pull request 'Read the one genesis bundle mesh-host carries now (issue 146)' (#284) from fix/146-controller-test-one-bundle into main	2026-10-12 23:21:14 +00:00
mesh-admin	cbac703e81	Merge pull request 'Say a build handed out again restarted: its log, the queue and the check's verdict (issue 594, part)' (#280) from fix/594-a-replaced-agent-finishes-its-build into main	2026-10-12 22:55:59 +00:00
mesh-admin	56d6313262	Merge pull request 'The controller's check stops waiting on fixtures and fixed intervals (issue 591)' (#279) from fix/591-the-controller-check-runs-in-minutes into main	2026-10-12 22:22:24 +00:00
mesh-admin	21ac8fd858	Merge pull request 'Let a mergeable file name the setting keys it takes (hq issue 168, ADR 0326)' (#272) from fix/168-a-file-names-the-settings-it-takes into main	2026-10-12 22:07:08 +00:00
mesh-admin	e63af0df17	Merge pull request 'End a walk's apply phase at each machine's own report of its send (hq issue 582)' (#278) from fix/582-apply-ends-at-the-machines-own-report into main	2026-10-12 21:36:33 +00:00
mesh-admin	961f2e82ea	Merge pull request 'Hand a delivery build out before pull-request checks (issue 558)' (#276) from fix/558-a-delivery-build-goes-first into main	2026-10-12 21:20:19 +00:00
mesh-admin	2f157148c6	Merge pull request 'node shows what a machine said it is made of, with its age (issue 160)' (#269) from fix/160-node-shows-what-a-machine-is into main	2026-10-12 20:37:06 +00:00
mesh-admin	13be75eb65	Merge pull request 'Replay issue 201 with only what the controller had before its fix (for mesh-lab R201)' (#275) from test/201-replay into main	2026-10-12 20:22:37 +00:00
mesh-admin	13711fb5b9	Merge pull request 'Mark that the build agent takes work, so its health check can see it ready (hq issue 544)' (#277) from fix/544-the-build-agent-says-it-is-ready into main	2026-10-12 19:58:09 +00:00
mesh-admin	c0c379af2b	Merge pull request 'Say the class of what a change plan moves, for a fix's budget (issue 403, hq ADR 0313)' (#265) from fix/403-fix-time into main	2026-10-12 19:41:26 +00:00
mesh-admin	4dbd4066ca	Merge pull request 'A seat names the paths its holder owns, and a claim or a declaration without the seat is refused (issue 412, hq ADR 0287)' (#267) from fix/412-a-seat-names-its-paths into main	2026-10-12 19:22:11 +00:00
mesh-admin	84deb530ee	Merge pull request 'Keep the controller and node-engine at the build a machine was last sent over an older record (hq issue 201)' (#273) from fix/201-a-push-never-downgrades-the-core into main	2026-10-12 18:52:04 +00:00
mesh-admin	a681227af3	Merge pull request 'Add issue 401's replay, written with what the controller had before its fix (hq issue 401)' (#274) from fix/401-replay into main	2026-10-12 18:22:09 +00:00
mesh-admin	d8f36a8fb7	Merge pull request 'Read an xz release in Go, so the build seat needs no xz tool (hq issue 345)' (#264) from fix/345-xz-in-go into main	2026-10-12 17:35:56 +00:00
mesh-admin	ba685b17f5	Merge pull request 'Let plans wait for a plan to move and answer it as data (issue 229)' (#266) from fix/229-plans-wait into main	2026-10-12 17:06:50 +00:00
mesh-admin	f8daec01d3	Merge pull request 'Read a plan by its id as a parameter, never as SQL (issue 561)' (#268) from fix/561-plan-id-parameter into main	2026-10-12 16:37:07 +00:00
mesh-admin	f10aedac58	Merge pull request 'A merge check judges the head merged into its trunk, and names the trunk commit (hq ADR 0323, issue 341)' (#271) from feat/341-a-merge-check-judges-the-merge into main	2026-10-12 16:11:27 +00:00
mesh-admin	1e28342ede	Merge pull request 'Make no value for an own secret issued outside the mesh that nobody gave (issue 401)' (#262) from fix/401-an-outside-secret-not-given-is-not-made into main	2026-10-12 15:48:12 +00:00
mesh-admin	c672b3df6d	Merge pull request 'Stop composing ADR 0312's group grant, so deliveries to the media machine pass again (hq issue 567)' (#270) from fix/567-revert-the-group-grant into main	2026-10-12 15:36:12 +00:00
mesh-admin	3cfc121670	Merge pull request 'Compose each read-write access's grant for the node-engine (hq ADR 0312, issue 537)' (#256) from feat/537-a-read-write-access-grants-the-paths-group into main	2026-10-12 14:20:27 +00:00
mesh-admin	db7e4869ae	Merge pull request 'Raise a machine that refuses or only partly applies its declarations past one apply interval (issue 233)' (#263) from fix/233-a-failed-probe-fails-only-what-needs-the-tool-2 into main	2026-10-12 14:11:10 +00:00
mesh-admin	9eddf36503	Merge pull request 'A directory's owner may follow the account its module runs as (issue 279)' (#260) from fix/279-owner-follows-a-setting into main	2026-10-12 14:00:23 +00:00
mesh-admin	5facd8b08e	Merge pull request 'An act's answer is said from one resolution after its write (hq issue 237)' (#253) from fix/237-one-resolution-for-assign into main	2026-10-12 13:31:03 +00:00
mesh-admin	72edb458cc	Merge pull request 'The node-reads seat: its verbs, its holder's own account, and the node's secret places (hq ADR 0310, issue 418)' (#257) from fix/418-node-reads into main	2026-10-12 13:20:23 +00:00
mesh-admin	2843834813	Merge pull request 'The build queue answers as data too (issue 455)' (#259) from fix/455-the-queue-answers-as-data into main	2026-10-12 13:04:26 +00:00
mesh-admin	27b13e4586	Merge pull request 'Ask a node's engine which of its directories the walk would refuse, read-only (issue 358)' (#258) from fix/358-judge-directories-read-only into main	2026-10-12 12:48:56 +00:00
mesh-admin	142a5ad71d	Merge pull request 'An archive may be an upstream release pinned by URL and sha256, mirrored by the build seat (hq issue 345, ADR 0316)' (#255) from fix/345-builder-archive-pins into main	2026-10-12 12:33:58 +00:00
mesh-admin	db9e9c5b87	Merge pull request 'Advise a recheck for an unanswered check on a ready or rejected delivery (issue 451)' (#254) from fix/451-a-recheck-is-the-step into main	2026-10-12 12:14:43 +00:00
mesh-admin	4b1dee6b79	Merge pull request 'A merge that shares nothing with the assembling batch, and whose group waits for no one, is cut at once (hq issue 525, ADR 0304 §1, ADR 0306 §2-3)' (#250) from feat/525-a-lone-merge-skips-the-window into main	2026-10-12 11:46:59 +00:00
mesh-admin	4ab441ce16	Merge pull request 'Ask only once the bus enforces the controller's own grant, judged for real and failing closed (review of hq issue 353)' (#188) from fix/353-the-asker-judges-the-controllers-own-grant into main	2026-10-12 11:34:14 +00:00
mesh-admin	dd2fd28c92	Merge pull request 'closedNames waits for the verb's own connection by name, not the first closed one (issue 543)' (#252) from fix/543-wait-for-the-verbs-own-connection-by-name into main	2026-10-12 11:21:18 +00:00
mesh-admin	9d165c7500	Merge pull request 'plan-moved says what a walk touches, its bound and its outcome when it starts and ends (ADR 0308, issue 532)' (#247) from adr-0308-walk-touches into main	2026-10-12 11:08:53 +00:00
mesh-admin	fafa3fd9ef	Merge pull request 'Require the service manager's reset-failed, wanted-by and unlink-dangling verbs (issue 332)' (#248) from fix/332-require-service-manager-verbs into main	2026-10-12 10:53:20 +00:00
mesh-admin	d881f4764d	Merge pull request 'Keep a condition's looks in the store, so a look that changes nothing writes no bucket (issue 420)' (#249) from fix/420-conditions-bucket-on-transition into main	2026-10-12 10:27:26 +00:00
mesh-admin	f549647d18	Merge pull request 'Give the unheld log test its own writer and memory, so it passes on a repeat (issue 486)' (#246) from fix/486-the-unheld-log-test-stands-alone into main	2026-10-12 10:10:39 +00:00
mesh-admin	22a2f73f7b	Merge pull request 'plans names the hold a waiting walk waits on (issue 529)' (#245) from fix/529-a-waiting-walk-is-answered-or-named into main	2026-10-12 09:55:17 +00:00
mesh-admin	d854598d8c	Merge pull request 'Wait out a forge not served for a moment when registering a build (issue 486)' (#244) from fix/486-the-forge-is-waited-out into main	2026-10-12 09:43:50 +00:00
mesh-admin	da1473e9db	Merge pull request 'Say a unit's restart count as what it counts, not since its state began (issue 458)' (#243) from fix/458-restarts-say-what-they-count into main	2026-10-12 08:56:34 +00:00
mesh-admin	3bd984c41e	Merge pull request 'Let a module keep a log the controller creates and never removes, and warn before a bucket or log is full (ADR 0297)' (#231) from adr-0297-module-logs into main	2026-10-12 00:42:55 +00:00
mesh-admin	ed1b106c19	Merge pull request 'Say what relates two changes, before anything acts on it (hq issue 525)' (#242) from feat/525-what-relates-two-changes into main	2026-10-12 00:35:18 +00:00
mesh-admin	b12da96906	Merge pull request 'Hold a leaf delivery to three minutes (hq ADR 0304 decision 4, issue 525)' (#241) from feat/525-leaf-budget-three-minutes into main	2026-10-12 00:02:24 +00:00
mesh-admin	eba0a301cc	Merge pull request 'Judge a leaf module on one healthy reading, a core module on three (hq issue 524)' (#240) from fix/524-judgement-by-class into main	2026-10-11 23:52:00 +00:00
mesh-admin	9c750a80de	Merge pull request 'A provider's software-issued credential is taken from the provider, sealed (issue 526, ADR 0305)' (#239) from feat/526-a-provider-delivers-what-its-software-issued into main	2026-10-11 23:29:10 +00:00
mesh-admin	b26499bb9f	Merge pull request 'The store-tests step fails on a malformed line, a failed go test and a shortened list (issue 515)' (#238) from fix/515-store-tests-step into main	2026-10-11 22:35:40 +00:00
mesh-admin	e1953ad3f5	Merge pull request 'Let several modules declare one package, and refuse only present beside absent (hq ADR 0303)' (#237) from feat/303-shared-packages into main	2026-10-11 20:39:23 +00:00
mesh-admin	0e86664191	Merge pull request 'delivery-stop leaves merges out and walks the others again (hq issue 459, ADR 0299)' (#232) from feat/459-a-stop-re-walks-the-others into main	2026-10-11 19:31:57 +00:00
mesh-admin	92aa3fb179	Merge pull request 'A build-log bus test waits for the stream to store both lines (hq issue 507)' (#236) from fix/507-a-build-log-test-waits into main	2026-10-11 19:12:47 +00:00
mesh-admin	c2abb3759a	Merge pull request 'Stop tracking built binaries at the repository root (issue 470)' (#235) from fix/470-no-built-binary-is-tracked into main	2026-10-11 19:07:25 +00:00
mesh-admin	ece3759647	Merge pull request 'Say each machine's last send in status and node show (hq issue 485)' (#234) from fix/485-the-last-send-is-said into main	2026-10-11 19:06:00 +00:00
mesh-admin	afc7dd8f68	Merge pull request 'Fail the repo check when a listed store test did not run against the store (hq issue 459)' (#233) from feat/459-store-tests-are-proven into main	2026-10-11 18:31:45 +00:00
mesh-admin	b555e995b0	Merge pull request 'A walk sends the bus's user list alone before its gate, so a new grant is on the bus when the first machine is judged (issue 490)' (#230) from fix/490-grants-reach-the-bus-before-the-gate into main	2026-10-11 18:19:33 +00:00
mesh-admin	315cbd1f54	Merge pull request 'Issue 496: a definition's resolved directory and file paths are judged by the node-engine's rules where the definition is judged' (#228) from fix/496-a-resolved-path-is-judged into main	2026-10-11 17:49:40 +00:00
mesh-admin	3b017b228c	Merge pull request 'Say a module assigned and left out of its machine's declaration as a condition (issue 380)' (#223) from fix/380-a-left-out-module-is-said into main	2026-10-11 17:36:58 +00:00
mesh-admin	fad655532d	Merge pull request 'A declaration says the assignment generation it came from, and every send is recorded (issue 234)' (#227) from fix/234-a-declaration-says-the-generation-it-came-from into main	2026-10-11 17:08:47 +00:00
mesh-admin	9edc5c758d	Merge pull request 'A controller test judges the runtime's daemon.json by the docker module's own keys, not live-restore alone (issue 498)' (#229) from fix/498-docker-gives-log-rotation-too into main	2026-10-11 16:52:51 +00:00
mesh-admin	fe2e5e91b5	Merge pull request 'A check never sees the forge credential, and what it publishes is redacted (issue 462)' (#226) from fix/462-a-check-never-sees-the-forge-credential into main	2026-10-11 10:19:01 +00:00
mesh-admin	51db0b5273	Merge pull request 'broker: each credential may call tools only in its own name on the caller-named subjects (hq issue 365)' (#224) from fix/365-a-tool-call-names-its-caller into main	2026-10-11 09:31:36 +00:00