Commit Graph

  • b9ceeace41 Merge pull request 'Merges are assembled in a rolling window, and each batch is walked once (hq ADR 0276, issue 362)' (#197) from fix/362-a-walk-answers-every-merge-it-contains into main mesh-admin 2026-10-10 12:26:20 +00:00
  • 2e0a7d1cbd Review: an answered retry never brings its old refusal back (issue 369) jochen 2026-10-10 14:14:07 +02:00
  • 3ced96fc6f A merge on the controller's own path never shares a batch with one that waits for the delivery's word (hq ADR 0276, decided during the build) jochen 2026-10-10 14:12:18 +02:00
  • d3b4549611 Ask again after a refusal, with a growing wait (issues 369 and 373) jochen 2026-10-10 14:02:59 +02:00
  • 065cfa0d1d Owe a merge to the record from its branch's first kept merge (hq ADR 0276 review) jochen 2026-10-10 13:54:40 +02:00
  • 0e0e143055 Keep a merge a cut made history, and build a batch's walk at the branch (hq ADR 0276 review) jochen 2026-10-10 13:48:31 +02:00
  • 2887691414 Walk the earlier merges of a failed walk as news (hq ADR 0276 review) jochen 2026-10-10 13:41:42 +02:00
  • e1499d4196 A late merge is named however its modules read since the cut; a walk builds the commits it carries (hq ADR 0276 review) jochen 2026-10-10 13:39:21 +02:00
  • 96fc4209d3 Assemble merges in a rolling window and walk each batch once (hq ADR 0276, issue 362) jochen 2026-10-10 13:11:46 +02:00
  • 8a53532d89 Merge pull request 'A plan says why each module is in it (hq ADR 0267, issue 363)' (#196) from fix/0267-a-plan-says-why-each-module-is-in-it into main mesh-admin 2026-10-10 11:04:07 +00:00
  • d0161fac52 Say a deleted module's reason, read a context's reason at the merged branch, and keep the snapshot's bytes (hq ADR 0267, review) jochen 2026-10-10 12:56:22 +02:00
  • 887de9b5f2 Say why each module is in a plan: its build source's changed files, or why it is read whole (hq ADR 0267, issue 363) jochen 2026-10-10 12:49:44 +02:00
  • 1560c498b6 Ask the rollback test's failed build after the registered one, whenever it runs jochen 2026-10-10 12:49:44 +02:00
  • df6d72aec2 Merge pull request 'Record a module's act on the operator's warrant from the router's own record (hq ADR 0274)' (#194) from feat/warranted-hand-act into main mesh-admin 2026-10-10 10:39:34 +00:00
  • a6bc0936e1 Merge pull request 'The gate's module check notes a seat another module declares, which it was not given (hq issue 364)' (#195) from fix/364-a-touched-manifest-uses-a-seat-another-module-declares into main mesh-admin 2026-10-10 10:06:27 +00:00
  • 513ebd0577 Merge pull request 'A merge moves a module only when its build source holds a changed file (hq ADR 0267, issue 363)' (#193) from fix/0267-a-merge-moves-what-its-build-source-holds into main mesh-admin 2026-10-10 02:00:18 +00:00
  • 88e84a4dd7 warranted says what the operator chose, never that the module acted (hq ADR 0274 review) jochen 2026-10-10 03:55:44 +02:00
  • 7b5c063cd3 The gate's module check notes a seat another module declares, which it was not given (hq issue 364) jochen 2026-10-10 03:53:07 +02:00
  • abd3078491 warranted takes no word of the caller's: the record is the router's alone (hq ADR 0274 review) jochen 2026-10-10 03:52:04 +02:00
  • 0e5aed1253 Record a module's act on the operator's warrant from the router's own record (hq ADR 0274) jochen 2026-10-10 03:40:49 +02:00
  • 6d3523ff10 Merge pull request 'A build says its build source; an image compiling Go is handed only that (hq ADR 0267, issue 363)' (#192) from fix/0267-a-build-says-its-build-source into main mesh-admin 2026-10-10 01:34:45 +00:00
  • bd35b1c06c Judge a packaging module's news by plans that built it, over every plan since its build (hq ADR 0267, review) jochen 2026-10-10 03:23:50 +02:00
  • 150f038ff8 Read a module whole while a plan has overtaken its build source, and plan every view alike (hq ADR 0267, review) jochen 2026-10-10 03:16:37 +02:00
  • 6c616838a5 Move a module on a merge only when its build source holds a changed file (hq ADR 0267, issue 363) jochen 2026-10-10 02:56:48 +02:00
  • de55c63e12 Hold a cgo file's directory whole: its preamble may include from below it (hq ADR 0267, review) jochen 2026-10-10 03:20:35 +02:00
  • abe5f7dc17 Say a build source only for the trunk's head, and hold what C, assembly and a new go.mod reach (hq ADR 0267, review) jochen 2026-10-10 03:11:06 +02:00
  • 4d1b81b6cb Say what a build was made from, and hand an image compiling Go only that (hq ADR 0267, issue 363) jochen 2026-10-10 02:47:35 +02:00
  • 9517f590ac Merge pull request 'Ask a node's engine for a fresh setuid search at the terminal (hq issue 361)' (#191) from fix/361-node-setuid-search-at-the-terminal into main mesh-admin 2026-10-10 00:06:33 +00:00
  • 9cef820117 Ask a node's engine for a fresh setuid search at the terminal (hq issue 361) jochen 2026-10-10 01:56:56 +02:00
  • 272ca2a578 Merge pull request 'Keep quiet for the setuid search the engine now runs to completion (hq issue 361)' (#190) from fix/361-the-setuid-search-runs-to-completion into main mesh-admin 2026-10-09 23:28:36 +00:00
  • 7160d95323 Pin the node-engine at its merge of the resumable setuid walk (hq issue 361) jochen 2026-10-10 01:19:17 +02:00
  • 9551bc2380 Say the setuid search's quiet in the tests' words, and pin the node-engine at its reviewed head (hq issue 361) jochen 2026-10-10 01:11:24 +02:00
  • cdaba36eca Pin the node-engine at its pull request's resumable walk (hq issue 361) jochen 2026-10-10 01:01:18 +02:00
  • eaf5195998 Keep quiet for the setuid search the engine now runs to completion (hq issue 361) jochen 2026-10-10 00:54:52 +02:00
  • a6f831a633 Merge pull request 'Say a secret given in plain words, and log words the keeper refuses (hq issue 359)' (#189) from fix/the-secret-given-words-pass-plain into main mesh-admin 2026-10-09 22:00:15 +00:00
  • a138c045bb Log a refused wording without what it quotes, and keep the secret-given words within bounds jochen 2026-10-09 23:44:19 +02:00
  • 988e501ccc Say a secret given in plain words, and log words the keeper refuses jochen 2026-10-09 23:41:22 +02:00
  • 19eefb66c6 Merge pull request 'node hand-over: the terminal hands a directory used as found to the mesh, asked of the node's engine (hq issue 356)' (#187) from fix/356-node-hand-over-at-the-terminal into main mesh-admin 2026-10-09 17:57:17 +00:00
  • 081d9244d6 Merge remote-tracking branch 'origin/main' into fix/356-node-hand-over-at-the-terminal jochen 2026-10-09 19:44:55 +02:00
  • b55a38ca9f Sign the hand-over ask, and fail the line on the engine's refusal (hq issue 356, review) jochen 2026-10-09 19:44:55 +02:00
  • 747734687e Merge pull request 'Ask the operator only once the bus holds the controller's grant to ask (hq issue 353)' (#186) from fix/353-the-controller-asks-only-once-the-bus-holds-its-grant into main mesh-admin 2026-10-09 17:34:08 +00:00
  • 9006c82393 node hand-over: the terminal hands a directory used as found to the mesh, asked of the node's engine (hq issue 356) jochen 2026-10-09 18:33:48 +02:00
  • 0c8c9ffae9 Ask the operator only once the bus holds the controller's grant to ask (hq issue 353) jschoubben 2026-10-09 18:08:41 +02:00
  • 1c7c385839 Merge pull request 'A gate judges its own send and the build it sent, and never puts the controller back behind its store (hq issue 352)' (#185) from fix/a-gate-outlives-the-controller-and-judges-the-build-it-sent into main mesh-admin 2026-10-09 16:10:13 +00:00
  • 65ff6159ad Merge pull request 'mesh-cli: give a terminal line the standard input mesh-cli carried, refuse it to any other, keep it nowhere (hq ADR 0259 §10, ADR 0272)' (#184) from feat/a-terminal-line-takes-standard-input into main mesh-admin 2026-10-09 16:10:11 +00:00
  • e6e1e3bc89 A gate judges its own send and the build it sent, and never puts the controller back behind its store (hq issue 352) jschoubben 2026-10-09 17:15:40 +02:00
  • 07e59c535e Pin mesh-host at its main (d8ff154), where the installer's first user list carries the controller's ask grants jschoubben 2026-10-09 17:10:16 +02:00
  • ba97297f66 mesh-cli: give a terminal line the standard input mesh-cli carried, refuse it to any other, keep it nowhere jschoubben 2026-10-09 17:01:36 +02:00
  • e6b00e2e51 Merge pull request 'give: take a module's own secret through a hidden prompt at the operator's desk (hq ADR 0259 §10)' (#156) from feat/a-secret-given-at-the-desk into main mesh-admin 2026-10-09 14:30:47 +00:00
  • fa19a2d718 give: test that a trusted party's secret given at the terminal is announced before it is kept, and refuse an unknown machine before anybody types jschoubben 2026-10-09 15:36:24 +02:00
  • 3e5086a2f6 give: never take a trusted party's secret at a desk, and announce it before it is kept (hq ADR 0259 §10, the confirmation review's N1-give) jschoubben 2026-10-09 13:58:19 +02:00
  • ed331eb972 Let the give verb's exact line past the terminal rule for secrets, and nothing else (hq ADR 0259 §10, ADR 0266) jschoubben 2026-10-09 13:32:02 +02:00
  • be59f29f46 give: take only a value a person holds, ask the desk by name, let the controller alone ask it, and announce every value given jschoubben 2026-10-09 12:12:25 +02:00
  • 5689553406 Take a module's own secret through a hidden prompt on the operator's desk, so a bot token never passes through an agent's session (hq ADR 0259 §10) jochen 2026-10-08 17:10:22 +02:00
  • 0559b80887 Move to mesh-sdk 16984aa, rebased on its main, which refuses a warrant with no time or for an ask with no expiry jschoubben 2026-10-09 13:59:20 +02:00
  • 74d35600a6 Keep an approval asked through a silence of its condition (hq ADR 0259, the confirmation review's M1) jschoubben 2026-10-09 13:56:09 +02:00
  • d19c9ed5b7 Start a rehearsal only at the controller's terminal as main now judges it (hq ADR 0259, ADR 0272) jschoubben 2026-10-09 13:53:28 +02:00
  • 799eec0a5a Ask an acknowledgement apart from an approval, change every kept ask by compare-and-set, and rehearse rather than drill (hq ADR 0259, review M1/L2/L3/L7) jschoubben 2026-10-09 12:24:52 +02:00
  • ad406e81b8 Say loudly when a condition that needs the operator could not be asked on any channel (hq ADR 0259) jschoubben 2026-10-09 11:11:54 +02:00
  • 646c5e53db Add drill: an ask the operator starts at the controller's terminal, whose approval performs nothing and is recorded (hq ADR 0259) jschoubben 2026-10-09 11:07:13 +02:00
  • 2190e2c664 Compose and raise the bus of the lab's proof of the operator's answers, as this controller would (hq ADR 0259) jschoubben 2026-10-09 11:03:53 +02:00
  • 0909d7b125 Bind each asked option to the exact act, and perform only that act on its warrant (hq ADR 0259 §6) jschoubben 2026-10-09 10:16:12 +02:00
  • 744b0b9162 Ask at most three at a time, wait out a refusal, need a router, and act only on a claimed open ask, as the review asked (hq ADR 0259) jochen 2026-10-08 18:37:30 +02:00
  • 8de4dc7951 Ask the operator for a condition's answers and act on the warrant, so release, stop, start and restart can be answered from any channel that proves who answered (hq ADR 0259) jochen 2026-10-08 17:14:53 +02:00
  • 2913c54c29 Merge pull request 'Kinded benches, verbs named by their caller, proofs and records (hq ADR 0259 §3)' (#154) from feat/asks-answered-on-any-channel into main mesh-admin 2026-10-09 14:17:43 +00:00
  • ef26d4cb0f Merge pull request 'Test the newest merge's order, a second reopening's gaps and sub-second merge times (hq issues 348, 349)' (#183) from fix/348-349-test-gaps into main mesh-admin 2026-10-09 13:55:14 +00:00
  • d9a730307c Test the newest merge's order, a second reopening's gaps and sub-second merge times (hq issues 348, 349) jschoubben 2026-10-09 15:29:31 +02:00
  • 9ca7952d5e Merge pull request 'Judge a send by when a fault began, not when it was last raised (hq issue 348)' (#179) from fix/a-fault-from-before-a-send-fails-no-gate into main mesh-admin 2026-10-09 13:25:21 +00:00
  • 58cb586c37 Answer the review of hq issues 348 and 349: gaps, parts, the newest merge in any state jschoubben 2026-10-09 14:58:23 +02:00
  • c3c56a69e2 Take either binding until the catalogue's main binds once (hq issue 348) jschoubben 2026-10-09 14:22:11 +02:00
  • 63b87b6f7b Hold the resolver to bind-interfaces, as mesh-catalog PR 161 makes it (hq issue 348) jschoubben 2026-10-09 14:07:16 +02:00
  • 997a4925b0 Order a branch's plans by its merges, and build the newest commit (hq issue 349) jschoubben 2026-10-09 14:04:39 +02:00
  • 077ddf0eb8 Judge a send by when a fault began, not when it was last raised (hq issue 348) jschoubben 2026-10-09 13:30:18 +02:00
  • 81f3c2d01b Test that plan --diff says a left-out module before the diff, through printed() test/plan-diff-left-out-line jochen 2026-10-09 14:46:42 +02:00
  • c58516f819 Merge pull request 'plan --diff says which modules a push would leave out, and why' (#181) from fix/plan-diff-says-what-it-leaves-out into main mesh-admin 2026-10-09 12:41:15 +00:00
  • 54b04a7604 plan --diff says which modules a push would leave out and why, so a module just assigned whose settings cannot compose is not shown as "nothing would change" jochen 2026-10-09 14:27:31 +02:00
  • af025562c7 Merge pull request 'Say the terminal explicitly, only from a login session, and name the unannounced pull request (hq ADR 0272)' (#180) from feat/272-the-terminal-said-explicitly into main mesh-admin 2026-10-09 12:02:52 +00:00
  • c544c2a17b Key root-not-free apart from DA, keep ADR 0266's quiet window there, and judge at one clock (hq ADR 0259 §8) jschoubben 2026-10-09 13:55:06 +02:00
  • 5866b2db94 Hold a private kind's holder to an account of its own, as a verified one is (hq ADR 0259 §7, §8) jschoubben 2026-10-09 13:51:54 +02:00
  • 983bf65141 Answer the controller's own verbs, root-free among them, from the serving controller alone (hq ADR 0259 §8) jschoubben 2026-10-09 13:51:18 +02:00
  • 0e46b8302d Let root-free take its machines as a list, as the router names them jschoubben 2026-10-09 12:24:52 +02:00
  • 4c375dafed Judge a machine root-free only on a positive, fresh measure, and believe a verified sender only there (hq ADR 0259 §8, review H2/H3) jschoubben 2026-10-09 12:12:32 +02:00
  • e2a45b18ba Refuse a module of its own account running as the node's operator or agent account (hq ADR 0259 §8, review L4) jschoubben 2026-10-09 12:03:28 +02:00
  • 5fa8e40667 Raise agent-root where who can become root is not measured, so the router never reads a missing measure as a no (hq ADR 0259 §8) jschoubben 2026-10-09 11:03:48 +02:00
  • b3fd360ddb Count the login shell where its execute is served, not where its seat is held (hq ADR 0268) jschoubben 2026-10-09 10:10:59 +02:00
  • 9372e80cec Serve a trusted holder from a runtime of its own account, refuse it in the machine's runtime, and say while an agent can become root where it runs (hq ADR 0259 §8) jochen 2026-10-08 18:31:31 +02:00
  • c9be75b13e Carry a channel's capabilities on its claim and tell the router every kind, so an answer is judged by the controller's record and not the channel's word jochen 2026-10-08 16:37:12 +02:00
  • f5f315cc95 Grant a seat's traffic by caller and by kind, so an ask's asker and a channel's kind are facts the bus enforces (hq ADR 0259) jochen 2026-10-08 16:27:30 +02:00
  • 51c8c7ec52 Say the terminal explicitly, only from a login session, and name the unannounced pull request (hq ADR 0272) jochen 2026-10-09 13:41:32 +02:00
  • 63e85b25e6 Merge pull request 'Say a pull request the forge never announced as one, with what to do (hq issue 347)' (#178) from fix/347-an-unannounced-pull-request-says-what-to-do into main mesh-admin 2026-10-09 11:38:47 +00:00
  • 93c6ca5432 Merge pull request 'Answer mesh-cli: the control-node's operator is the terminal, everyone else is not (hq ADR 0272)' (#176) from feat/272-answer-mesh-cli into main mesh-admin 2026-10-09 11:38:43 +00:00
  • 14ab2ddd9b Announce this head: the pull request was opened after its push, which the announcer misses (hq issue 347) jochen 2026-10-09 13:22:22 +02:00
  • 510c91f144 Say a pull request the forge never announced as one, with what to do (hq issue 347) jochen 2026-10-09 13:15:20 +02:00
  • 33dc85d850 Merge pull request 'Judge the one protection rule the forge applies, and keep a recorded repository id (#174 follow-up)' (#177) from fix/the-forges-first-rule-and-a-kept-identity into main mesh-admin 2026-10-09 11:14:28 +00:00
  • ea1d3ed96d Merge main (hq ADR 0266) into the mesh-cli answer, and close what the confirmation review found jochen 2026-10-09 13:08:38 +02:00
  • eca6390d6f Judge the one protection rule the forge applies, and keep a recorded repository id jochen 2026-10-09 12:58:28 +02:00
  • 5438d7ff75 Merge pull request 'Do not raise agent-can-become-root while the first setuid search is within its bound (hq ADR 0266, note E)' (#175) from fix/a-search-not-finished-after-a-restart-is-not-urgent into main mesh-admin 2026-10-09 10:56:15 +00:00
  • eb7a158086 Merge pull request 'Register a module only from the repository the catalogue builds it from (hq ADR 0266 §7, route A)' (#174) from fix/a-build-registers-only-from-its-modules-source into main mesh-admin 2026-10-09 10:56:08 +00:00
  • 03dac87d3a Merge pull request 'Name the account agents run as on a node, and say whether it can become root (hq ADR 0266)' (#164) from feat/a-node-names-the-account-its-agents-run-as into main mesh-admin 2026-10-09 10:56:04 +00:00
  • 0c47f48537 mesh-cli lines are calls, followed to their answer; the terminal does not follow assign (review of hq ADR 0272) jochen 2026-10-09 12:48:12 +02:00