Commit Graph

  • ba26ba2772 Merge pull request 'The module graph decides what a pull request's check runs; one commit, one change plan; publish only the trunk (hq ADR 0238)' (#101) from feat/the-graph-decides-what-is-checked into main mesh-admin 2026-10-06 21:00:25 +00:00
  • 3d05d74400 Publish only a commit on its module's trunk; post a pull request's change plan (hq ADR 0238) jochen 2026-10-06 22:44:08 +02:00
  • 58ebe590a5 Ask the planner what a pull request reaches; map a changed file onto modules in one place (hq ADR 0238) jochen 2026-10-06 22:34:31 +02:00
  • b24bb030ec A changed file touches exactly the modules whose build reads it (hq issue 280, ADR 0237) jochen 2026-10-06 22:18:14 +02:00
  • 327654e57b Fail a touched manifest's module check only for what the change brings (hq ADR 0237) jochen 2026-10-06 22:09:25 +02:00
  • 14127d4878 Let the module graph decide what a pull request's check runs, in two layers (hq ADR 0237) jochen 2026-10-06 21:51:19 +02:00
  • d0580a17e5 Merge pull request 'Send a plan's tier to each machine once, and blame no module for its machine (hq issue 281)' (#100) from fix/one-send-per-machine-per-tier into main mesh-admin 2026-10-06 20:26:04 +00:00
  • d6e0a8250a Send a plan's tier to each machine once, and blame no module for its machine (hq issue 281) jochen 2026-10-06 22:20:22 +02:00
  • 9b6b0c5686 Merge pull request 'A rebuild of an unchanged source is no move, whatever image digest it made (hq issue 280)' (#99) from fix/an-unchanged-source-is-no-move into main mesh-admin 2026-10-06 20:12:06 +00:00
  • 792352dfad Read a rebuild of an unchanged source as no move, whatever image digest it made (hq issue 280) jschoubben 2026-10-06 22:09:11 +02:00
  • b9e0cd34c3 Merge pull request 'Phase 5 (4/4): replay issues 263 and 273 (hq ADR 0237)' (#98) from feat/replays into main mesh-admin 2026-10-06 19:19:49 +00:00
  • 1c26235bc1 Merge pull request 'Phase 5 (3/4): every test on a bus of its own, at the release the mesh runs (hq ADR 0237)' (#97) from feat/a-suite-that-cannot-flake into main mesh-admin 2026-10-06 19:19:41 +00:00
  • bbd442cdf4 Merge pull request 'Phase 5 (2/4): judge every pull request against the mesh that runs, before it merges (hq ADR 0237)' (#96) from feat/merge-gate into main mesh-admin 2026-10-06 19:19:34 +00:00
  • 042874e0ce Merge pull request 'Phase 5 (1/4): keep a facts snapshot for merge checks, and say when it goes stale (hq ADR 0237, S14)' (#95) from feat/facts-snapshot into main mesh-admin 2026-10-06 19:19:19 +00:00
  • be92762969 Give every test a bus of its own, at the release the mesh runs (hq ADR 0237) jochen 2026-10-06 21:11:18 +02:00
  • 9c714f00d6 Judge every pull request against the mesh that runs, before it merges (hq ADR 0237, to-be 45 §9) jochen 2026-10-06 21:11:26 +02:00
  • cbce8f96ef Replay issues 263 and 273 as tests the commit before each fix fails (hq to-be 45 §9) jochen 2026-10-06 20:59:15 +02:00
  • 068283137b Keep a facts snapshot for merge checks, and say when it goes stale (hq to-be 45 Phase 5, S14) jochen 2026-10-06 20:27:42 +02:00
  • 0090bf6af7 Merge pull request 'A module's directory is never shared code, held or not (hq issue 278)' (#93) from fix/a-module-directory-is-never-shared-code into main mesh-admin 2026-10-06 18:28:47 +00:00
  • 58924dc920 Merge pull request 'S15: a hand act a person decides by design is no repair, read from the verb that recorded it (hq to-be 45 §7)' (#94) from fix/s15-a-persons-decision-is-no-repair into main mesh-admin 2026-10-06 18:14:47 +00:00
  • b1016e5c66 S15: a hand act a person decides by design is no repair, read from the verb that recorded it jochen 2026-10-06 20:13:42 +02:00
  • b1e02aca1b A module's directory is never shared code, held or not (hq issue 278) jochen 2026-10-06 19:55:25 +02:00
  • 4635341a9d Merge pull request 'Phase 4: gate a plan's first machine, roll a failed build back there, roll out by default, the bus as a planned step (hq ADR 0236)' (#92) from feat/core-upgrades-that-roll-back into main mesh-admin 2026-10-06 17:15:08 +00:00
  • dcec6a4db3 gofmt jochen 2026-10-06 19:14:35 +02:00
  • 2bfa6ae4a0 No build reaches a machine without a gate; a release plan walks what waits (hq ADR 0236) jochen 2026-10-06 19:14:25 +02:00
  • 41f7b2c152 Tell a rebuild that changes nothing by its artifacts and its manifest (hq ADR 0236) jochen 2026-10-06 18:54:12 +02:00
  • 37229b4db5 Refuse every send that would replace the bus outside its planned step (hq ADR 0236) jochen 2026-10-06 18:53:38 +02:00
  • d7bf1bae83 Name the decision this builds: hq ADR 0236 (0235 is the bus's snapshot) jochen 2026-10-06 18:38:51 +02:00
  • c6f3d8cdfa Take the bus's snapshot through its machine's backup holder before the planned step (hq ADR 0235, 0236) jochen 2026-10-06 18:31:54 +02:00
  • d9289ef6d4 Gate a release plan's first machine and roll a failed build back there (hq ADR 0236) jochen 2026-10-06 18:29:29 +02:00
  • 81f497e5dd Merge pull request 'Look twice before saying a probe failed, and say conditions in machine names (hq issue 277)' (#91) from fix/probes-look-twice-and-say-no-addresses into main mesh-admin 2026-10-06 16:47:40 +00:00
  • 8e8712e352 Look twice before saying a probe failed, and say conditions in machine names (hq issue 277) jochen 2026-10-06 18:40:33 +02:00
  • 7aa98e64ce Merge pull request 'Grant the bus's own module the snapshot API and nothing else (hq ADR 0235)' (#90) from feat/bus-snapshot into main mesh-admin 2026-10-06 16:24:53 +00:00
  • 48581af35c Grant the bus's own module the snapshot API and nothing else (hq ADR 0235) jochen 2026-10-06 18:20:57 +02:00
  • 4d05385819 Merge pull request 'A machine waiting for its push is waiting, not uncomposable (hq issue 275)' (#89) from fix/d1-a-push-not-made-yet-is-pending into main mesh-admin 2026-10-06 16:07:17 +00:00
  • dcee8cb5bf Say a machine waiting for its push as waiting, not uncomposable (hq issue 275) jochen 2026-10-06 18:05:38 +02:00
  • 2b5060789f Merge pull request 'A module declares the data it holds; protection and D13 derived from it (hq ADR 0233)' (#88) from feat/a-module-declares-the-data-it-holds into main mesh-admin 2026-10-06 15:00:53 +00:00
  • abf9125689 Measure each item its own way; never compare a partial size (hq ADR 0233) jochen 2026-10-06 17:00:22 +02:00
  • 52af210e47 Derive data protection from a module's declared data (hq ADR 0233) jochen 2026-10-06 16:47:49 +02:00
  • 4b25af2aa3 Merge pull request 'Grant a provider only the consumers bound to it (hq issue 274)' (#87) from fix/a-grant-follows-the-binding into main mesh-admin 2026-10-06 14:09:28 +00:00
  • fc65215c25 Grant a provider only the consumers bound to it (hq issue 274) jochen 2026-10-06 16:07:12 +02:00
  • c988d6d7be Merge pull request 'Keep a consumer bound where its data is; only a pin moves it (hq ADR 0232, issue 273)' (#86) from fix/a-stateful-binding-moves-only-by-a-person into main mesh-admin 2026-10-06 13:22:42 +00:00
  • 8bfaf1523e Keep a consumer bound where its data is; only a pin moves it (hq ADR 0232, issue 273) jochen 2026-10-06 15:19:23 +02:00
  • b037c73fd5 Merge pull request 'Retire the networking bundle and what the control plane stops shipping (hq ADR 0226)' (#77) from feat/retire-the-networking-bundle into main mesh-admin 2026-10-06 13:12:52 +00:00
  • 18da8b37e9 Retire the networking bundle and what the control plane stops shipping (hq ADR 0226) jochen 2026-10-06 02:21:18 +02:00
  • 4f4d365360 Merge pull request 'Retire, approve, reject, cleanup: the controller's half of hq ADR 0230' (#84) from feat/retired-consumers into main mesh-admin 2026-10-06 12:46:33 +00:00
  • 08e11ad761 Keep a person's retirement decisions out of healer-wanted jochen 2026-10-06 14:45:57 +02:00
  • 3b2adda1c8 Say a mark-only provider's retirement as mark only jochen 2026-10-06 14:34:16 +02:00
  • 68009b16fe Hear what providers retire, and let a person approve, reject and delete (hq ADR 0230) jochen 2026-10-06 14:24:58 +02:00
  • 298daa6fbe Merge pull request 'Heal what is known, under a brake, and say every repair (hq to-be 45 Phase 3)' (#85) from feat/a-core-that-cannot-fail-silently-phase-3 into main mesh-admin 2026-10-06 12:29:15 +00:00
  • 751e39186c Heal what is known, under a brake, and say every repair (hq to-be 45 Phase 3) jochen 2026-10-06 14:25:47 +02:00
  • 20c147ffdb Merge pull request 'Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)' (#83) from feat/a-core-that-cannot-fail-silently-phase-2 into main mesh-admin 2026-10-06 10:30:29 +00:00
  • 2eb9a22c24 Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2) jochen 2026-10-06 12:29:18 +02:00
  • 070ecafc07 Merge pull request 'Replace a value given by hand like one the mesh made (hq ADR 0228)' (#82) from feat/a-given-secret-lives-until-the-first-good-start into main mesh-admin 2026-10-06 10:16:30 +00:00
  • e51c6a2cb9 Replace a value given by hand like one the mesh made (hq ADR 0228) jochen 2026-10-06 12:13:48 +02:00
  • 722682f1c4 Merge pull request 'Assert the bus's objects on every send, not only at start (hq issue 208)' (#81) from fix/issue-208-bus-objects-on-send into main mesh-admin 2026-10-06 09:47:01 +00:00
  • b853439792 Assert the bus's objects on every send, not only at start (hq issue 208) jochen 2026-10-06 11:45:51 +02:00
  • 9cf47f4429 Merge pull request 'Grant the self-check its ban-list question, say a refusal at once, judge the engine by its delivered version (hq to-be 45 Phase 1)' (#80) from fix/phase-1-d8-grant-and-d10-version into main mesh-admin 2026-10-06 08:45:16 +00:00
  • 8ddc019cd2 Grant the self-check its ban-list question, say a refusal at once, judge the engine by its delivered version (hq to-be 45 Phase 1) jochen 2026-10-06 10:44:38 +02:00
  • fab6b0059e Merge pull request 'Say when the mesh is wrong: conditions, watchdogs, the bus's advisories, doctor (hq to-be 45 Phase 1)' (#79) from feat/a-core-that-cannot-fail-silently-phase-1 into main mesh-admin 2026-10-06 08:29:31 +00:00
  • e1f5d4fdf0 Vendor every dependency, so no build fetches the host's validator (hq to-be 45 D1) jochen 2026-10-06 10:29:10 +02:00
  • bb1607e424 Say when the mesh is wrong: conditions, watchdogs, the bus's advisories, doctor (hq to-be 45 Phase 1) jochen 2026-10-06 10:18:47 +02:00
  • cf4834a36c Merge pull request 'Keep calls and hand acts on the bus, answer status at once, record durations (hq to-be 45 Phase 0)' (#78) from feat/a-core-that-cannot-fail-silently-phase-0 into main mesh-admin 2026-10-06 07:13:39 +00:00
  • 9d8cbe7b81 Grant the controller its work queues' cancelled sets (hq issue 269) jochen 2026-10-06 03:01:19 +02:00
  • e74c32ed50 Keep calls and hand acts on the bus, answer status at once, record durations (hq to-be 45 Phase 0) jochen 2026-10-06 02:59:36 +02:00
  • 146c48fd96 Merge pull request 'Bound a consumer's identity by the provision it requires (hq issue 263, ADR 0225)' (#76) from fix/263-identity-bound-per-provision into main mesh-admin 2026-10-06 00:28:47 +00:00
  • 1f3abd3e0e Merge pull request 'rotate: narrow a pair credential to one consuming module (hq issue 268)' (#75) from feat/rotate-one-consuming-module into main mesh-admin 2026-10-06 00:25:31 +00:00
  • 6d620f77c3 Bound a consumer's identity by the provision it requires (hq issue 263) jochen 2026-10-06 02:16:20 +02:00
  • f8286c063d rotate: narrow a pair credential to one consuming module (hq issue 268) jochen 2026-10-06 02:13:48 +02:00
  • e096b4595a Merge pull request 'Keep the account of the sent declaration over an older one (hq issue 267)' (#74) from fix/stale-report-overwrites into main mesh-admin 2026-10-05 23:47:10 +00:00
  • 09c0c6b367 Keep the account of the sent declaration over an older one (hq issue 267) jochen 2026-10-06 01:45:35 +02:00
  • d1fc25f682 Merge pull request 'Catch up on merges the bus announced and never handed over (hq issue 266)' (#73) from fix/missed-merges-are-caught-up into main mesh-admin 2026-10-05 23:33:18 +00:00
  • eda457f415 Merge pull request 'Answer every seat call within ten seconds and keep what came of it (hq issue 265)' (#72) from fix/a-verb-answers-before-its-caller-gives-up into main mesh-admin 2026-10-05 23:33:11 +00:00
  • 59f4d486b1 Catch up on merges the bus announced and never handed over (hq issue 266) jochen 2026-10-06 01:29:21 +02:00
  • 801552c0eb Answer every seat call within ten seconds and keep what came of it (hq issue 265) jochen 2026-10-06 01:14:58 +02:00
  • ede9bce6ef Merge pull request 'Refuse a verb argument the seat would pass over; a push without a machine says it is the whole mesh (hq issue 244)' (#71) from fix/verb-schemas into main mesh-admin 2026-10-05 22:43:07 +00:00
  • 0f0028785c Refuse a verb argument the seat would pass over, and say a push is of the whole mesh jochen 2026-10-06 00:37:14 +02:00
  • 6fdcfad8d3 Merge pull request 'Report a provider that keeps failing a consumer in status (hq ADR 0224)' (#70) from feat/a-provider-failing-a-consumer-is-reported into main mesh-admin 2026-10-05 22:20:45 +00:00
  • 8d9d33ae85 Report a provider that keeps failing a consumer in status (hq ADR 0224) jochen 2026-10-06 00:13:22 +02:00
  • cc25baa563 Merge pull request 'Rename node-hosts-file to node-hostname, and refuse one seat claimed under two names (hq ADR 0223 part 3)' (#69) from hostname-module into main mesh-admin 2026-10-05 22:11:41 +00:00
  • 68a2ebdcc3 Merge pull request 'Retire node-resolver-config and the seat need only it used (hq ADR 0223 part 2, step 2 of 2)' (#68) from retire-resolv-conf into main mesh-admin 2026-10-05 22:08:03 +00:00
  • 69b99eec68 Number the hostname seat migration 0064: it merges after the resolver-config one jochen 2026-10-06 00:07:57 +02:00
  • 09bd0eec4f Number the resolver-config migration 0063: it merges first jochen 2026-10-06 00:07:54 +02:00
  • 222a38e050 Merge pull request 'Test resolv.conf as the uplink's, and refuse a second writer of a fact's path (hq ADR 0223 part 2, step 1 of 2)' (#67) from resolv-conf-to-uplink into main mesh-admin 2026-10-05 21:57:03 +00:00
  • ee99a24f77 Rename node-hosts-file to node-hostname, and refuse one seat claimed under two names (hq ADR 0223) jochen 2026-10-05 23:43:15 +02:00
  • f68521da28 Retire node-resolver-config and the seat need it alone used (hq ADR 0223) jochen 2026-10-05 23:40:39 +02:00
  • 296064c799 Test the resolver file as the uplink's, and refuse a second writer of a fact's path (hq ADR 0223) jochen 2026-10-05 23:39:15 +02:00
  • df9231c734 Merge pull request 'A mesh seat may be replicated: the resolver held on two machines (hq ADR 0223)' (#65) from feat/the-mesh-has-two-resolvers into main mesh-admin 2026-10-05 20:48:23 +00:00
  • 843b709b59 The registry-trust test reads the runtime's module, which now writes the trust (ADR 0222) jochen 2026-10-05 22:46:57 +02:00
  • f506fb34ec Let the mesh's resolver seat have several holders on record jochen 2026-10-05 22:38:44 +02:00
  • c34b937dd3 Merge pull request 'The private network writes nothing into the runtime's file; generated resources are collision-checked (hq ADR 0222, issue 190 — 3 of 3)' (#63) from fix/190-the-overlay-writes-no-runtime-file into main mesh-admin 2026-10-05 20:42:32 +00:00
  • d84c9699b3 Merge pull request 'Tell a module where a mesh seat's holder is reached: ${seat:<seat>:reach} (hq ADR 0222, issue 190 — 1 of 3)' (#62) from fix/190-seat-reach into main mesh-admin 2026-10-05 20:31:32 +00:00
  • 002d5e578c Merge pull request 'A named push sends no build a policy or a plan holds back (hq issue 259, ADR 0221)' (#64) from fix/259-a-named-push-sends-no-held-build into main mesh-admin 2026-10-05 20:26:50 +00:00
  • 2421b82ad2 Keep a named push from sending builds a policy or a plan holds back jochen 2026-10-05 22:22:03 +02:00
  • 0ebd48a6a8 The private network writes nothing into the runtime's file (hq issue 190) jochen 2026-10-05 22:19:43 +02:00
  • 67e291c02a Tell a module where a mesh seat's holder is reached (hq ADR 0222) jochen 2026-10-05 22:16:23 +02:00
  • 8a400d165e Merge pull request 'Delete node-dns-resolver; resolver config needs the uplink (hq ADR 0220)' (#61) from feat/resolver-config-needs-the-uplink into main mesh-admin 2026-10-05 20:11:18 +00:00
  • 53d3cd7ce9 Delete node-dns-resolver and make resolver config need the uplink jochen 2026-10-05 21:57:04 +02:00
  • 6648e4a5c8 Merge pull request 'The controller writes no /etc/hosts (hq ADR 0199)' (#60) from fix/the-controller-writes-no-hosts-file into main mesh-admin 2026-10-05 19:23:41 +00:00
  • 7fa2568ce7 The controller writes no /etc/hosts (hq ADR 0199) jochen 2026-10-05 21:23:25 +02:00