novox/mesh-controller
13
0
Fork 0
Code Issues Pull Requests 6 Releases Wiki Activity
1,650 Commits 14 Branches 0 Tags
9f2e16ff704cc7dd1ea11b60a0ec73f2a1a969cb
Commit Graph
2 Commits
Author SHA1 Message Date
mesh-adminandClaude Opus 5.5 661918f4e4 Promise get on the vault's seat, so the Go vault can serve it (issue 674)
mesh/merge-gate head 661918f4e4e0 merged into trunk 71362c196dbc — pass: the change touches no module of the mesh's graph
Details
mesh/repo-check head 661918f4e4e0 merged into trunk 71362c196dbc — pass: its merge-check.sh passed
Details
mesh/delivery delivered
Details
mesh/delivery-group group pkg/57-v1-vault-in-go delivered: every member is delivered
Details 
The vault hands a secret only on request and reply, sealed to the asker's key
(hq ADR 0349 §11). The seat set is the controller's, so the verb is promised
here; optional until the vault that runs serves it (design 33 §7).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-14 00:51:59 +00:00
jschoubben e8e502343f The vault's seat, and a report that carries the machine's profile (hq ADR 0161) 
mesh-vault joins the mesh's own set — mesh-scoped, delivering secret — because the controller seals
every minted credential with it, which is the test for a seat of the mesh's own; a second provider is
a second claimant, refused by name (issue 106). A report may carry the machine's profile, detected
again by the apply that reports, and the latest replaces the enrolled one: a machine that switched
its network manager is a machine whose uplink holder lacks a capability at its next push (issue 138).
 2026-10-01 15:58:04 +02:00