Fixes novox/hq issue 449 (a controller test reads the SDK from a sibling checkout, so it passes or fails by what the desktop holds), step 1 of 2. The branch is rebased onto main (9d6a12e).
Why two steps
The build seat runs the running controller's besideRefs, and that controller does not clone mesh-sdk. This PR adds the clone, but the clone only appears after this PR has rolled out. If a missing clone failed the test, this PR could never pass its own mesh/repo-check. So step 1 reads the captured copy when the clone is missing and says so plainly. Step 2, the follow-up below, makes a missing clone a failure again.
What changes
internal/link/conformance_test.go read ../../../mesh-sdk and skipped when it was missing. Now it reads the SDK this tree's go.mod pins for git.novox.be/novox/mesh-sdk/go. That pin is a pseudo-version's commit, or go/<version> for a tagged release. The same applies to TestTheNatsBusEmitsTheEnvelopeTheFixturePins in bus_test.go, which shares the fixture loader.
In a merge check where mesh-sdk is beside the check:
The test reads the fixture at the tree's own pin from the clone's history, with git -c safe.directory=* -C <clone> show <pin>:conformance/.... It does not use the clone's checkout. That way a PR that moves the SDK is judged against the SDK it moves to.
A pin the clone lacks fails the test and names the pin.
The captured copy is compared byte for byte with the clone at the commit testdata/beside/CAPTURED names. A copy edited by hand fails.
In a merge check where mesh-sdk is not beside the check (today's seat):
The test reads the captured copy, and the assertions still run.
The test log says: NOT JUDGED AGAINST THE CLONE: the seat placed no mesh-sdk beside this check in MESH_CHECK_BESIDE=… (it does once mesh-controller #220 has rolled out); read the captured copy at <commit>. The same line goes once to stderr.
Limit: go test ./... prints neither the log nor stderr of a passing package unless -v is given. In the seat's report, the line shows only when the package fails or the check runs with -v.
Anywhere else: the test reads testdata/beside/mesh-sdk. That copy was captured with git archive at f047d0a4a9702f5d7f3d7eadd3e62496311acc00, the commit go.mod pins. The commit is recorded in CAPTURED, together with how to capture it again. TestTheCapturedSDKIsTheOneGoModPins fails when go.mod moves the SDK and the captured copy stays behind.
The build seat:
besideRefs and checkRequestFor now clone mesh-sdk beside a controller check, found as the controller's sibling the same way mesh-lab is. Before this PR they did not.
The clone is checked out at the running controller's pin (sdkPinned, read from the binary's build info). That checkout only places the clone; the test reads the tree's own pin from its history.
The facts snapshot and check-here get the clone through besideRefs.
TestACheckByHandClonesWhatTheSeatClones expects mesh-sdk at the commit go.mod pins.
Tests
internal/link/conformance_sources_test.go builds its own small SDK repository with two commits and checks the clone out at the older one, so it needs nothing from the seat. It covers these cases:
a pin ahead of the captured copy reads the clone at that pin;
a captured copy edited by hand fails;
a pin the clone lacks fails and is named;
a missing clone reads the captured copy and says NOT JUDGED with the captured commit;
away from a check, the captured copy is read.
Shown to fail
An emitter that drops x-node: FAIL.
Reading the clone's checkout instead of using git show at the pin: FAIL.
Without the byte comparison: FAIL.
besideRefs without mesh-sdk: FAIL.
A CAPTURED commit that differs from go.mod's pin: FAIL.
Against the real mesh-sdk clone: the test read at f047d0a4a970 and passed; after I edited the captured copy by hand, it failed.
gofmt -l reports nothing, go vet ./... is clean, and go test ./internal/link/ ./cmd/mesh-controller/ -count=1 passes. go test ./internal/link/ with MESH_CHECK_BESIDE pointing at an empty directory, which is today's seat, passes and logs NOT JUDGED. make check was not run.
The link tests need git in the check's Go toolchain for the fixture tests in conformance_sources_test.go, and for reading the clone once the seat places one. This PR's mesh/repo-check will show whether git is there.
Follow-up (step 2): after this PR has rolled out, on a new branch from main
First confirm that a controller check's seat log says beside it mesh-sdk at …. Then, in internal/link/conformance_test.gosdkFixture:
replace the missing-clone branch, the one that returns the captured copy with notJudged, with return nil, "", fmt.Errorf("mesh-sdk is not beside this check in %s=%s, so the SDK this controller pins cannot be judged here: %w", beside.Env, root, err);
remove notJudged and saidNotJudged and their use in loadFixture;
in conformance_sources_test.go, replace TestAMergeCheckWithoutTheCloneSaysItReadTheCapturedCopy with a test that sdkFixture(t.TempDir(), …) returns an error containing "not beside this check";
That makes a missing mesh-sdk clone in a merge check fail again, as the catalogue and mesh-host clones already do (issue 432).
Fixes novox/hq issue 449 (a controller test reads the SDK from a sibling checkout, so it passes or fails by what the desktop holds), step 1 of 2. The branch is rebased onto main (9d6a12e).
## Why two steps
The build seat runs the *running* controller's `besideRefs`, and that controller does not clone mesh-sdk. This PR adds the clone, but the clone only appears after this PR has rolled out. If a missing clone failed the test, this PR could never pass its own `mesh/repo-check`. So step 1 reads the captured copy when the clone is missing and says so plainly. Step 2, the follow-up below, makes a missing clone a failure again.
## What changes
`internal/link/conformance_test.go` read `../../../mesh-sdk` and skipped when it was missing. Now it reads the SDK this tree's go.mod pins for `git.novox.be/novox/mesh-sdk/go`. That pin is a pseudo-version's commit, or `go/<version>` for a tagged release. The same applies to `TestTheNatsBusEmitsTheEnvelopeTheFixturePins` in bus_test.go, which shares the fixture loader.
**In a merge check where mesh-sdk is beside the check:**
- The test reads the fixture at the tree's own pin from the clone's history, with `git -c safe.directory=* -C <clone> show <pin>:conformance/...`. It does not use the clone's checkout. That way a PR that moves the SDK is judged against the SDK it moves to.
- A pin the clone lacks fails the test and names the pin.
- The captured copy is compared byte for byte with the clone at the commit `testdata/beside/CAPTURED` names. A copy edited by hand fails.
**In a merge check where mesh-sdk is not beside the check** (today's seat):
- The test reads the captured copy, and the assertions still run.
- The test log says: `NOT JUDGED AGAINST THE CLONE: the seat placed no mesh-sdk beside this check in MESH_CHECK_BESIDE=… (it does once mesh-controller #220 has rolled out); read the captured copy at <commit>`. The same line goes once to stderr.
- Limit: `go test ./...` prints neither the log nor stderr of a passing package unless `-v` is given. In the seat's report, the line shows only when the package fails or the check runs with `-v`.
**Anywhere else:** the test reads `testdata/beside/mesh-sdk`. That copy was captured with `git archive` at f047d0a4a9702f5d7f3d7eadd3e62496311acc00, the commit go.mod pins. The commit is recorded in `CAPTURED`, together with how to capture it again. `TestTheCapturedSDKIsTheOneGoModPins` fails when go.mod moves the SDK and the captured copy stays behind.
**The build seat:**
- `besideRefs` and `checkRequestFor` now clone mesh-sdk beside a controller check, found as the controller's sibling the same way mesh-lab is. Before this PR they did not.
- The clone is checked out at the running controller's pin (`sdkPinned`, read from the binary's build info). That checkout only places the clone; the test reads the tree's own pin from its history.
- The facts snapshot and `check-here` get the clone through `besideRefs`.
- `TestACheckByHandClonesWhatTheSeatClones` expects mesh-sdk at the commit go.mod pins.
## Tests
`internal/link/conformance_sources_test.go` builds its own small SDK repository with two commits and checks the clone out at the older one, so it needs nothing from the seat. It covers these cases:
- a pin ahead of the captured copy reads the clone at that pin;
- a captured copy edited by hand fails;
- a pin the clone lacks fails and is named;
- a missing clone reads the captured copy and says NOT JUDGED with the captured commit;
- away from a check, the captured copy is read.
## Shown to fail
- An emitter that drops `x-node`: FAIL.
- Reading the clone's checkout instead of using `git show` at the pin: FAIL.
- Without the byte comparison: FAIL.
- `besideRefs` without mesh-sdk: FAIL.
- A `CAPTURED` commit that differs from go.mod's pin: FAIL.
- Against the real mesh-sdk clone: the test read at f047d0a4a970 and passed; after I edited the captured copy by hand, it failed.
`gofmt -l` reports nothing, `go vet ./...` is clean, and `go test ./internal/link/ ./cmd/mesh-controller/ -count=1` passes. `go test ./internal/link/` with `MESH_CHECK_BESIDE` pointing at an empty directory, which is today's seat, passes and logs NOT JUDGED. `make check` was not run.
The link tests need `git` in the check's Go toolchain for the fixture tests in conformance_sources_test.go, and for reading the clone once the seat places one. This PR's `mesh/repo-check` will show whether git is there.
## Follow-up (step 2): after this PR has rolled out, on a new branch from main
First confirm that a controller check's seat log says `beside it mesh-sdk at …`. Then, in `internal/link/conformance_test.go` `sdkFixture`:
- replace the missing-clone branch, the one that returns the captured copy with `notJudged`, with `return nil, "", fmt.Errorf("mesh-sdk is not beside this check in %s=%s, so the SDK this controller pins cannot be judged here: %w", beside.Env, root, err)`;
- remove `notJudged` and `saidNotJudged` and their use in `loadFixture`;
- in `conformance_sources_test.go`, replace `TestAMergeCheckWithoutTheCloneSaysItReadTheCapturedCopy` with a test that `sdkFixture(t.TempDir(), …)` returns an error containing "not beside this check";
- update the comments that name #220's rollout.
That makes a missing mesh-sdk clone in a merge check fail again, as the catalogue and mesh-host clones already do (issue 432).
Deliverynovox/mesh-controller@9b6acf0ef53c — delivered since 2026-10-11T09:15:44Z
Delivery plan — builds mesh-controller → novox; no bus step
tier 0: mesh-controller
novox: receives mesh-controller
Machines
mesh-controller on novox: passed — healthy 3 times over 4m9s
mesh-controller on the rest running it: sent
Transitions
2026-10-11 02:21 (new) → proposed (announced): novox/mesh-controller#220's head announced
2026-10-11 02:26 proposed → checked (checked): the verdict names this commit
2026-10-11 02:26 checked → ready (accepted): the gate passed or warned, and the repository's own check did not fail
2026-10-11 09:10 ready → published (merged): on the trunk its modules follow: merged there, and its walk opened — or nothing for a walk to move
2026-10-11 09:10 published → delivering (go): its walk started: let go by this owner in its group's order, by a person, or on the controller's own path — not a failed walk that carried a later commit for it, after which it waits for a walk of its own commit
2026-10-11 09:15 delivering → delivered (done): its walk is done, carrying its own commit: every machine of its deploy plan passed, or was left as its policy says
The commit's note under refs/notes/mesh-plan keeps every transition: git log --notes=mesh-plan.
<!-- mesh-delivery:view -->
**Delivery** `novox/mesh-controller@9b6acf0ef53c` — **delivered** since 2026-10-11T09:15:44Z
**Delivery plan** — builds mesh-controller → novox; no bus step
- tier 0: mesh-controller
- novox: receives mesh-controller
**Machines**
- mesh-controller on novox: passed — healthy 3 times over 4m9s
- mesh-controller on the rest running it: sent
**Transitions**
- 2026-10-11 02:21 (new) → proposed (announced): novox/mesh-controller#220's head announced
- 2026-10-11 02:26 proposed → checked (checked): the verdict names this commit
- 2026-10-11 02:26 checked → ready (accepted): the gate passed or warned, and the repository's own check did not fail
- 2026-10-11 09:10 ready → published (merged): on the trunk its modules follow: merged there, and its walk opened — or nothing for a walk to move
- 2026-10-11 09:10 published → delivering (go): its walk started: let go by this owner in its group's order, by a person, or on the controller's own path — not a failed walk that carried a later commit for it, after which it waits for a walk of its own commit
- 2026-10-11 09:15 delivering → delivered (done): its walk is done, carrying its own commit: every machine of its deploy plan passed, or was left as its policy says
The commit's note under `refs/notes/mesh-plan` keeps every transition: `git log --notes=mesh-plan`.
Rebased onto main (8305e4e, #217 merged), so this PR is no longer stacked on #217. Pushed 63969ce to address the review's finding.
What changed: in a merge check, the conformance test now reads the fixture at the pin in the tree's own go.mod. That pin is a pseudo-version's commit, or go/<version> for a tagged release. The test reads it with git -c safe.directory=* -C <clone> show <ref>:conformance/... from the mesh-sdk clone beside the check. Before, it read the clone's checkout, which is the running controller's pin. The clone's checkout now only decides where the clone sits, and besideRefs / sdkPinned say so in a comment. If the clone is missing, or lacks the pin, the test fails and names the pin. The merge check also compares the captured copy with the clone at the commit CAPTURED names, byte for byte, so a captured copy edited by hand fails.
This replaces the limit stated in the PR description: a PR that moves the SDK is now judged against the SDK it moves to.
New tests (internal/link/conformance_sources_test.go) use a two-commit SDK repository of their own, with the clone checked out at the older commit:
a pin ahead of the captured copy reads the clone at the newer pin;
a captured copy edited by hand fails;
a pin the clone lacks fails and names the pin;
a missing clone fails;
away from a check, the captured copy is read.
Shown to fail without the change:
reading the checkout instead of git show at the pin: the test reads "older" while the tree pins the newer commit, FAIL;
without the byte comparison: "a hand-edited captured copy was accepted", FAIL.
Checked against the real mesh-sdk clone with MESH_CHECK_BESIDE:
the test read at f047d0a4a970 (this tree's go.mod) and passed;
after I edited the captured fixture by hand: "the captured conformance/events/module-event.json is not mesh-sdk's at f047d0a4…", FAIL.
gofmt -l reports nothing, go vet ./... is clean, and go test ./internal/link/ ./cmd/mesh-controller/ -count=1 passes.
The link tests now need git in the check's toolchain, as git show does.
Rebased onto main (8305e4e, #217 merged), so this PR is no longer stacked on #217. Pushed 63969ce to address the review's finding.
**What changed:** in a merge check, the conformance test now reads the fixture at the pin in the tree's own go.mod. That pin is a pseudo-version's commit, or `go/<version>` for a tagged release. The test reads it with `git -c safe.directory=* -C <clone> show <ref>:conformance/...` from the mesh-sdk clone beside the check. Before, it read the clone's checkout, which is the running controller's pin. The clone's checkout now only decides where the clone sits, and `besideRefs` / `sdkPinned` say so in a comment. If the clone is missing, or lacks the pin, the test fails and names the pin. The merge check also compares the captured copy with the clone at the commit CAPTURED names, byte for byte, so a captured copy edited by hand fails.
This replaces the limit stated in the PR description: a PR that moves the SDK is now judged against the SDK it moves to.
**New tests** (`internal/link/conformance_sources_test.go`) use a two-commit SDK repository of their own, with the clone checked out at the older commit:
- a pin ahead of the captured copy reads the clone at the newer pin;
- a captured copy edited by hand fails;
- a pin the clone lacks fails and names the pin;
- a missing clone fails;
- away from a check, the captured copy is read.
**Shown to fail without the change:**
- reading the checkout instead of `git show` at the pin: the test reads "older" while the tree pins the newer commit, FAIL;
- without the byte comparison: "a hand-edited captured copy was accepted", FAIL.
**Checked against the real mesh-sdk clone** with `MESH_CHECK_BESIDE`:
- the test read at f047d0a4a970 (this tree's go.mod) and passed;
- after I edited the captured fixture by hand: "the captured conformance/events/module-event.json is not mesh-sdk's at f047d0a4…", FAIL.
`gofmt -l` reports nothing, `go vet ./...` is clean, and `go test ./internal/link/ ./cmd/mesh-controller/ -count=1` passes.
The link tests now need `git` in the check's toolchain, as `git show` does.
Run by the build seat on ace as build-1791681649187772167 (builds --log build-1791681649187772167).
--- the gate: mesh-controller
mesh-controller: ok, 56 tool(s); WARNING: merge-window ask(s) for a setting and do(es) not say whether it is trusted, so it counts as trusted: set at the terminal alone; say "trusted" false where nothing trusts it (novox/hq issue 339); WARNING: controller stay(s) up and say(s) not how it is ready — judged by liveness alone, refused from 2026-11-18 (ADR 0240 rule 8)
long-running resources without health: 1
files asking for a setting without saying whether it is trusted: 1
1 manifest(s) checked. Judged against the seats this binary carries; a claim on one of the mesh's own seats is judged fully at registration, and a seat declared by a module not given here reads as unknown. Identities judged on a 6-character machine name, against the bounds of the providers given here
judging 1 module(s) changed against 4 machine(s), as the snapshot of 2026-10-11T01:18:19Z says they run
composing every machine as the mesh is
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
composing every machine with the change
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
merge gate: PASS — every machine composes with the change as it did without (4 of 4 compose)
judged by controller development build against the facts of 2026-10-11T01:18:19Z
modules the change moves:
- mesh-controller (changed)
machines:
- a machine (f35): composes
- holds mesh-dns-resolver (idt): composes
- holds git, holds mesh-artifact-store, holds mesh-broker, holds mesh-catalog, holds mesh-delivery, holds mesh-dns-resolver, holds mesh-store, holds mesh-vault, holds npm-package-registry, the control node, the hub (ygcyr): composes
- a machine (yvbpsm): composes
a merge would rebuild 1 module(s) in 1 tier(s): mesh-controller
notes:
- cmd/mesh-controller/check_test.go, cmd/mesh-controller/merge_gate_test.go, cmd/mesh-controller/network_test.go, internal/beside/beside.go, internal/broker/agreement_catalogue_test.go, internal/broker/genesis_template_test.go, internal/catalogue/amqp_is_not_a_provision_test.go, internal/catalogue/bus_snapshot_test.go, internal/catalogue/catalogue_check_test.go, internal/catalogue/catrust_manifest_test.go, internal/catalogue/environment_into_test.go, internal/catalogue/foundation_manifests_test.go, internal/catalogue/mounts_test.go, internal/catalogue/no_subjects_test.go, internal/catalogue/public_issuer_test.go, internal/catalogue/seat_data_test.go, internal/catalogue/seats_test.go, internal/catalogue/showcase_manifest_test.go, internal/link/conformance_test.go, internal/testbus/testbus_test.go, testdata/beside/CAPTURED, testdata/beside/mesh-catalog/modules/adwaita/module.json.captured, testdata/beside/mesh-catalog/modules/artifact-store-tools/module.json.captured, testdata/beside/mesh-catalog/modules/asus-zephyrus-g14/module.json.captured, testdata/beside/mesh-catalog/modules/audit-logger/module.json.captured, testdata/beside/mesh-catalog/modules/avahi/module.json.captured, testdata/beside/mesh-catalog/modules/baserow/module.json.captured, testdata/beside/mesh-catalog/modules/betterbird/module.json.captured, testdata/beside/mesh-catalog/modules/blueman/module.json.captured, testdata/beside/mesh-catalog/modules/bluetooth/module.json.captured, testdata/beside/mesh-catalog/modules/build-agent/module.json.captured, testdata/beside/mesh-catalog/modules/ca-trust/module.json.captured, testdata/beside/mesh-catalog/modules/claude-code/module.json.captured, testdata/beside/mesh-catalog/modules/claude-licence-manager/module.json.captured, testdata/beside/mesh-catalog/modules/clipmenu/module.json.captured, testdata/beside/mesh-catalog/modules/confluence/module.json.captured, testdata/beside/mesh-catalog/modules/cups/module.json.captured, testdata/beside/mesh-catalog/modules/dbus/module.json.captured, testdata/beside/mesh-catalog/modules/de-spiegel/module.json.captured, testdata/beside/mesh-catalog/modules/desk-channel/module.json.captured, testdata/beside/mesh-catalog/modules/disk-load/module.json.captured, testdata/beside/mesh-catalog/modules/distribution/module.json.captured, testdata/beside/mesh-catalog/modules/dmenu/module.json.captured, testdata/beside/mesh-catalog/modules/dnsmasq/module.json.captured, testdata/beside/mesh-catalog/modules/docker-compose/module.json.captured, testdata/beside/mesh-catalog/modules/docker/module.json.captured, testdata/beside/mesh-catalog/modules/dunst/module.json.captured, testdata/beside/mesh-catalog/modules/fail2ban/module.json.captured, testdata/beside/mesh-catalog/modules/feh/module.json.captured, testdata/beside/mesh-catalog/modules/flatpak/module.json.captured, testdata/beside/mesh-catalog/modules/fonts/module.json.captured, testdata/beside/mesh-catalog/modules/forticlient/module.json.captured, testdata/beside/mesh-catalog/modules/gitea/module.json.captured, testdata/beside/mesh-catalog/modules/gitlab/module.json.captured, testdata/beside/mesh-catalog/modules/gnome-keyring/module.json.captured, testdata/beside/mesh-catalog/modules/grafana/module.json.captured, testdata/beside/mesh-catalog/modules/hello-web/module.json.captured, testdata/beside/mesh-catalog/modules/home-assistant/module.json.captured, testdata/beside/mesh-catalog/modules/hostname/module.json.captured, testdata/beside/mesh-catalog/modules/i3/module.json.captured, testdata/beside/mesh-catalog/modules/i3status-rust/module.json.captured, testdata/beside/mesh-catalog/modules/icecast/module.json.captured, testdata/beside/mesh-catalog/modules/influxdb/module.json.captured, testdata/beside/mesh-catalog/modules/invoicing/module.json.captured, testdata/beside/mesh-catalog/modules/jira/module.json.captured, testdata/beside/mesh-catalog/modules/keycloak/module.json.captured, testdata/beside/mesh-catalog/modules/lab/module.json.captured, testdata/beside/mesh-catalog/modules/lemurs/module.json.captured, testdata/beside/mesh-catalog/modules/letta/module.json.captured, testdata/beside/mesh-catalog/modules/local-model-consumer/module.json.captured, testdata/beside/mesh-catalog/modules/localization/module.json.captured, testdata/beside/mesh-catalog/modules/logrotate/module.json.captured, testdata/beside/mesh-catalog/modules/mailu/module.json.captured, testdata/beside/mesh-catalog/modules/marrytts/module.json.captured, testdata/beside/mesh-catalog/modules/matrix/module.json.captured, testdata/beside/mesh-catalog/modules/memory-pressure/module.json.captured, testdata/beside/mesh-catalog/modules/mesh-catalog/module.json.captured, testdata/beside/mesh-catalog/modules/mesh-cli/module.json.captured, testdata/beside/mesh-catalog/modules/mesh-delivery/module.json.captured, testdata/beside/mesh-catalog/modules/mesh-issues/module.json.captured, testdata/beside/mesh-catalog/modules/mesh-vault/module.json.captured, testdata/beside/mesh-catalog/modules/mesh-watcher/module.json.captured, testdata/beside/mesh-catalog/modules/messenger/module.json.captured, testdata/beside/mesh-catalog/modules/minio/module.json.captured, testdata/beside/mesh-catalog/modules/model-usage/module.json.captured, testdata/beside/mesh-catalog/modules/mongodb/module.json.captured, testdata/beside/mesh-catalog/modules/mosquitto/module.json.captured, testdata/beside/mesh-catalog/modules/mounts/module.json.captured, testdata/beside/mesh-catalog/modules/mssql/module.json.captured, testdata/beside/mesh-catalog/modules/n8n/module.json.captured, testdata/beside/mesh-catalog/modules/nats/Dockerfile, testdata/beside/mesh-catalog/modules/nats/module.json.captured, testdata/beside/mesh-catalog/modules/netcheck/module.json.captured, testdata/beside/mesh-catalog/modules/networkmanager/module.json.captured, testdata/beside/mesh-catalog/modules/nextcloud-client/module.json.captured, testdata/beside/mesh-catalog/modules/nextcloud/module.json.captured, testdata/beside/mesh-catalog/modules/nfs-server/module.json.captured, testdata/beside/mesh-catalog/modules/nftables/module.json.captured, testdata/beside/mesh-catalog/modules/nm-applet/module.json.captured, testdata/beside/mesh-catalog/modules/node-env/module.json.captured, testdata/beside/mesh-catalog/modules/nodered/module.json.captured, testdata/beside/mesh-catalog/modules/ollama/module.json.captured, testdata/beside/mesh-catalog/modules/only-office/module.json.captured, testdata/beside/mesh-catalog/modules/openai-consumer/module.json.captured, testdata/beside/mesh-catalog/modules/openrazer/module.json.captured, testdata/beside/mesh-catalog/modules/pacman/module.json.captured, testdata/beside/mesh-catalog/modules/photos-eef/module.json.captured, testdata/beside/mesh-catalog/modules/photos-filip/module.json.captured, testdata/beside/mesh-catalog/modules/picom/module.json.captured, testdata/beside/mesh-catalog/modules/polychromatic/module.json.captured, testdata/beside/mesh-catalog/modules/postgres/module.json.captured, testdata/beside/mesh-catalog/modules/power/module.json.captured, testdata/beside/mesh-catalog/modules/powerlevel10k/module.json.captured, testdata/beside/mesh-catalog/modules/records/module.json.captured, testdata/beside/mesh-catalog/modules/redis/module.json.captured, testdata/beside/mesh-catalog/modules/restic/module.json.captured, testdata/beside/mesh-catalog/modules/rofi/module.json.captured, testdata/beside/mesh-catalog/modules/route-adapter/module.json.captured, testdata/beside/mesh-catalog/modules/route-proxy/module.json.captured, testdata/beside/mesh-catalog/modules/screen-lock/module.json.captured, testdata/beside/mesh-catalog/modules/searxng/module.json.captured, testdata/beside/mesh-catalog/modules/sensors/module.json.captured, testdata/beside/mesh-catalog/modules/showcase/module.json.captured, testdata/beside/mesh-catalog/modules/slack/module.json.captured, testdata/beside/mesh-catalog/modules/snapd/module.json.captured, testdata/beside/mesh-catalog/modules/ssh-client/module.json.captured, testdata/beside/mesh-catalog/modules/sshd/module.json.captured, testdata/beside/mesh-catalog/modules/step-ca/module.json.captured, testdata/beside/mesh-catalog/modules/sudo/module.json.captured, testdata/beside/mesh-catalog/modules/supabase/module.json.captured, testdata/beside/mesh-catalog/modules/systemd-networkd/module.json.captured, testdata/beside/mesh-catalog/modules/systemd-resolved/module.json.captured, testdata/beside/mesh-catalog/modules/systemd/module.json.captured, testdata/beside/mesh-catalog/modules/telegram/module.json.captured, testdata/beside/mesh-catalog/modules/time-sync/module.json.captured, testdata/beside/mesh-catalog/modules/triggerhappy/module.json.captured, testdata/beside/mesh-catalog/modules/umami/module.json.captured, testdata/beside/mesh-catalog/modules/unifi/module.json.captured, testdata/beside/mesh-catalog/modules/website/module.json.captured, testdata/beside/mesh-catalog/modules/xclip/module.json.captured, testdata/beside/mesh-catalog/modules/xdg/module.json.captured, testdata/beside/mesh-catalog/modules/xorg/module.json.captured, testdata/beside/mesh-catalog/modules/xterm/module.json.captured, testdata/beside/mesh-catalog/modules/zfs/module.json.captured, testdata/beside/mesh-catalog/modules/zsh-autosuggestions/module.json.captured, testdata/beside/mesh-catalog/modules/zsh-syntax-highlighting/module.json.captured, testdata/beside/mesh-catalog/modules/zsh/module.json.captured, testdata/beside/mesh-host/examples/foundation-first-node-nats.lock and testdata/beside/mesh-sdk/conformance/events/module-event.json read by no module's build, and rebuild nothing (issue 280)
--- its merge-check.sh (go toolchain)
ok github.com/novox/mesh-controller/cmd/mesh-builder 1.039s
ok github.com/novox/mesh-controller/cmd/mesh-controller 201.962s
ok github.com/novox/mesh-controller/examples/objectstore-provisioner 1.029s
ok github.com/novox/mesh-controller/examples/postgres-provisioner 1.030s
ok github.com/novox/mesh-controller/examples/redis-provisioner 1.020s
ok github.com/novox/mesh-controller/examples/route-proxy 1.122s
ok github.com/novox/mesh-controller/internal/artifacts 1.062s
? github.com/novox/mesh-controller/internal/beside [no test files]
ok github.com/novox/mesh-controller/internal/broker 2.678s
ok github.com/novox/mesh-controller/internal/builder 2.556s
ok github.com/novox/mesh-controller/internal/catalogue 6.513s
ok github.com/novox/mesh-controller/internal/conditions 2.466s
ok github.com/novox/mesh-controller/internal/envfile 1.028s
ok github.com/novox/mesh-controller/internal/facts 1.026s
ok github.com/novox/mesh-controller/internal/identity 4.237s
ok github.com/novox/mesh-controller/internal/inventory 76.804s
ok github.com/novox/mesh-controller/internal/lease 17.702s
ok github.com/novox/mesh-controller/internal/licences 3.812s
ok github.com/novox/mesh-controller/internal/licences/adapters 1.059s
nats: permissions violation: Permissions Violation for Publish to "mesh.seat.s.tool.v.anchor" on connection [5]
could not read whether b-1 was cancelled, so it is built: nats: no responders available for request
could not read whether b-2 was cancelled, so it is built: nats: no responders available for request
could not read whether b-3 was cancelled, so it is built: nats: no responders available for request
could not read whether b-3 was cancelled, so it is built: nats: no responders available for request
could not read whether w-1 was cancelled, so it is built: nats: no responders available for request
could not read whether w-2 was cancelled, so it is built: nats: no responders available for request
could not read whether w-3 was cancelled, so it is built: nats: no responders available for request
could not read whether build-old-seat was cancelled, so it is built: nats: no responders available for request
--- FAIL: TestTheNatsBusEmitsTheEnvelopeTheFixturePins (0.03s)
bus_test.go:24: mesh-sdk is not beside this check in MESH_CHECK_BESIDE=/var/lib/build-agent/workspace/check, so its agreement with this repository cannot be judged here: stat /var/lib/build-agent/workspace/check/mesh-sdk: no such file or directory
--- FAIL: TestTheGoEmitterSetsEveryRequiredHeader (0.00s)
conformance_test.go:83: mesh-sdk is not beside this check in MESH_CHECK_BESIDE=/var/lib/build-agent/workspace/check, so its agreement with this repository cannot be judged here: stat /var/lib/build-agent/workspace/check/mesh-sdk: no such file or directory
--- FAIL: TestTheGoEmittersHeaderFormatsMatch (0.00s)
conformance_test.go:96: mesh-sdk is not beside this check in MESH_CHECK_BESIDE=/var/lib/build-agent/workspace/check, so its agreement with this repository cannot be judged here: stat /var/lib/build-agent/workspace/check/mesh-sdk: no such file or directory
--- FAIL: TestTheGoSubjectMatchesTheFixture (0.00s)
conformance_test.go:120: mesh-sdk is not beside this check in MESH_CHECK_BESIDE=/var/lib/build-agent/workspace/check, so its agreement with this repository cannot be judged here: stat /var/lib/build-agent/workspace/check/mesh-sdk: no such file or directory
2026/10/11 01:22:47 the notices of messages consumers gave up on cannot be taken, so none is kept until they can: asking about consumer controller on DEAD_LETTER_NOTICES: nats: stream not found
build-cancelled was cancelled by hand as this machine took it; not built
build-waited-cancelled was cancelled by hand as this machine took it; not built
2026/10/11 01:22:59 the notices of messages consumers gave up on cannot be taken, so none is kept until they can: nats: consumer not found
2026/10/11 01:23:14 how sonarr on media hears what it consumes gave up on message 1 of EVENTS (mesh.mod.gitea.event.pull.merged) after 5 deliveries; kept as dead letter 1
2026/10/11 01:23:15 another controller holds the controller's consumer on CONTROL; standing by until it lets go
2026/10/11 01:23:16 took the controller's consumer on CONTROL: the controller that held it let go
2026/10/11 01:23:22 kept what home-server says about the machine, and refused its account of declaration d11 (epoch 57, sequence 11, report 40): the account kept is newer
2026/10/11 01:23:22 kept what home-server says about the machine, and refused its account of declaration d12 (epoch 57, sequence 12, report 40): the account kept is newer
2026/10/11 01:23:25 kept what home-server says about the machine, and not its account of declaration d1: the mesh has sent it d2 since
2026/10/11 01:23:26 anchor took over the tunnel on wg0: its overlay key is the tunnel's now
FAIL
FAIL github.com/novox/mesh-controller/internal/link 50.595s
ok github.com/novox/mesh-controller/internal/lint 2.170s
ok github.com/novox/mesh-controller/internal/outward 1.090s
ok github.com/novox/mesh-controller/internal/overlay 1.038s
ok github.com/novox/mesh-controller/internal/secrets 1.448s
ok github.com/novox/mesh-controller/internal/store 3.331s
ok github.com/novox/mesh-controller/internal/testbus 1.198s
ok github.com/novox/mesh-controller/internal/token 1.018s
FAIL
**Merge check** at `833d3046`
- `mesh/merge-gate`: **PASS** — every machine composes with the change as it did without (4 of 4 compose) (modules: mesh-controller)
- `mesh/repo-check`: **FAIL** — its merge-check.sh failed: --- FAIL: TestTheNatsBusEmitsTheEnvelopeTheFixturePins (0.03s)
**Delivery plan** — builds mesh-controller → novox; no bus step
- tier 0: mesh-controller
- novox: receives mesh-controller
- read by no module's build: cmd/mesh-controller/check_test.go, cmd/mesh-controller/merge_gate_test.go, cmd/mesh-controller/network_test.go, internal/beside/beside.go, internal/broker/agreement_catalogue_test.go, internal/broker/genesis_template_test.go, internal/catalogue/amqp_is_not_a_provision_test.go, internal/catalogue/bus_snapshot_test.go, internal/catalogue/catalogue_check_test.go, internal/catalogue/catrust_manifest_test.go, internal/catalogue/environment_into_test.go, internal/catalogue/foundation_manifests_test.go, internal/catalogue/mounts_test.go, internal/catalogue/no_subjects_test.go, internal/catalogue/public_issuer_test.go, internal/catalogue/seat_data_test.go, internal/catalogue/seats_test.go, internal/catalogue/showcase_manifest_test.go, internal/link/conformance_test.go, internal/testbus/testbus_test.go, testdata/beside/CAPTURED, testdata/beside/mesh-catalog/modules/adwaita/module.json.captured, testdata/beside/mesh-catalog/modules/artifact-store-tools/module.json.captured, testdata/beside/mesh-catalog/modules/asus-zephyrus-g14/module.json.captured, testdata/beside/mesh-catalog/modules/audit-logger/module.json.captured, testdata/beside/mesh-catalog/modules/avahi/module.json.captured, testdata/beside/mesh-catalog/modules/baserow/module.json.captured, testdata/beside/mesh-catalog/modules/betterbird/module.json.captured, testdata/beside/mesh-catalog/modules/blueman/module.json.captured, testdata/beside/mesh-catalog/modules/bluetooth/module.json.captured, testdata/beside/mesh-catalog/modules/build-agent/module.json.captured, testdata/beside/mesh-catalog/modules/ca-trust/module.json.captured, testdata/beside/mesh-catalog/modules/claude-code/module.json.captured, testdata/beside/mesh-catalog/modules/claude-licence-manager/module.json.captured, testdata/beside/mesh-catalog/modules/clipmenu/module.json.captured, testdata/beside/mesh-catalog/modules/confluence/module.json.captured, testdata/beside/mesh-catalog/modules/cups/module.json.captured, testdata/beside/mesh-catalog/modules/dbus/module.json.captured, testdata/beside/mesh-catalog/modules/de-spiegel/module.json.captured, testdata/beside/mesh-catalog/modules/desk-channel/module.json.captured, testdata/beside/mesh-catalog/modules/disk-load/module.json.captured, testdata/beside/mesh-catalog/modules/distribution/module.json.captured, testdata/beside/mesh-catalog/modules/dmenu/module.json.captured, testdata/beside/mesh-catalog/modules/dnsmasq/module.json.captured, testdata/beside/mesh-catalog/modules/docker-compose/module.json.captured, testdata/beside/mesh-catalog/modules/docker/module.json.captured, testdata/beside/mesh-catalog/modules/dunst/module.json.captured, testdata/beside/mesh-catalog/modules/fail2ban/module.json.captured, testdata/beside/mesh-catalog/modules/feh/module.json.captured, testdata/beside/mesh-catalog/modules/flatpak/module.json.captured, testdata/beside/mesh-catalog/modules/fonts/module.json.captured, testdata/beside/mesh-catalog/modules/forticlient/module.json.captured, testdata/beside/mesh-catalog/modules/gitea/module.json.captured, testdata/beside/mesh-catalog/modules/gitlab/module.json.captured, testdata/beside/mesh-catalog/modules/gnome-keyring/module.json.captured, testdata/beside/mesh-catalog/modules/grafana/module.json.captured, testdata/beside/mesh-catalog/modules/hello-web/module.json.captured, testdata/beside/mesh-catalog/modules/home-assistant/module.json.captured, testdata/beside/mesh-catalog/modules/hostname/module.json.captured, testdata/beside/mesh-catalog/modules/i3/module.json.captured, testdata/beside/mesh-catalog/modules/i3status-rust/module.json.captured, testdata/beside/mesh-catalog/modules/icecast/module.json.captured, testdata/beside/mesh-catalog/modules/influxdb/module.json.captured, testdata/beside/mesh-catalog/modules/invoicing/module.json.captured, testdata/beside/mesh-catalog/modules/jira/module.json.captured, testdata/beside/mesh-catalog/modules/keycloak/module.json.captured, testdata/beside/mesh-catalog/modules/lab/module.json.captured, testdata/beside/mesh-catalog/modules/lemurs/module.json.captured, testdata/beside/mesh-catalog/modules/letta/module.json.captured, testdata/beside/mesh-catalog/modules/local-model-consumer/module.json.captured, testdata/beside/mesh-catalog/modules/localization/module.json.captured, testdata/beside/mesh-catalog/modules/logrotate/module.json.captured, testdata/beside/mesh-catalog/modules/mailu/module.json.captured, testdata/beside/mesh-catalog/modules/marrytts/module.json.captured, testdata/beside/mesh-catalog/modules/matrix/module.json.captured, testdata/beside/mesh-catalog/modules/memory-pressure/module.json.captured, testdata/beside/mesh-catalog/modules/mesh-catalog/module.json.captured, testdata/beside/mesh-catalog/modules/mesh-cli/module.json.captured, testdata/beside/mesh-catalog/modules/mesh-delivery/module.json.captured, testdata/beside/mesh-catalog/modules/mesh-issues/module.json.captured, testdata/beside/mesh-catalog/modules/mesh-vault/module.json.captured, testdata/beside/mesh-catalog/modules/mesh-watcher/module.json.captured, testdata/beside/mesh-catalog/modules/messenger/module.json.captured, testdata/beside/mesh-catalog/modules/minio/module.json.captured, testdata/beside/mesh-catalog/modules/model-usage/module.json.captured, testdata/beside/mesh-catalog/modules/mongodb/module.json.captured, testdata/beside/mesh-catalog/modules/mosquitto/module.json.captured, testdata/beside/mesh-catalog/modules/mounts/module.json.captured, testdata/beside/mesh-catalog/modules/mssql/module.json.captured, testdata/beside/mesh-catalog/modules/n8n/module.json.captured, testdata/beside/mesh-catalog/modules/nats/Dockerfile, testdata/beside/mesh-catalog/modules/nats/module.json.captured, testdata/beside/mesh-catalog/modules/netcheck/module.json.captured, testdata/beside/mesh-catalog/modules/networkmanager/module.json.captured, testdata/beside/mesh-catalog/modules/nextcloud-client/module.json.captured, testdata/beside/mesh-catalog/modules/nextcloud/module.json.captured, testdata/beside/mesh-catalog/modules/nfs-server/module.json.captured, testdata/beside/mesh-catalog/modules/nftables/module.json.captured, testdata/beside/mesh-catalog/modules/nm-applet/module.json.captured, testdata/beside/mesh-catalog/modules/node-env/module.json.captured, testdata/beside/mesh-catalog/modules/nodered/module.json.captured, testdata/beside/mesh-catalog/modules/ollama/module.json.captured, testdata/beside/mesh-catalog/modules/only-office/module.json.captured, testdata/beside/mesh-catalog/modules/openai-consumer/module.json.captured, testdata/beside/mesh-catalog/modules/openrazer/module.json.captured, testdata/beside/mesh-catalog/modules/pacman/module.json.captured, testdata/beside/mesh-catalog/modules/photos-eef/module.json.captured, testdata/beside/mesh-catalog/modules/photos-filip/module.json.captured, testdata/beside/mesh-catalog/modules/picom/module.json.captured, testdata/beside/mesh-catalog/modules/polychromatic/module.json.captured, testdata/beside/mesh-catalog/modules/postgres/module.json.captured, testdata/beside/mesh-catalog/modules/power/module.json.captured, testdata/beside/mesh-catalog/modules/powerlevel10k/module.json.captured, testdata/beside/mesh-catalog/modules/records/module.json.captured, testdata/beside/mesh-catalog/modules/redis/module.json.captured, testdata/beside/mesh-catalog/modules/restic/module.json.captured, testdata/beside/mesh-catalog/modules/rofi/module.json.captured, testdata/beside/mesh-catalog/modules/route-adapter/module.json.captured, testdata/beside/mesh-catalog/modules/route-proxy/module.json.captured, testdata/beside/mesh-catalog/modules/screen-lock/module.json.captured, testdata/beside/mesh-catalog/modules/searxng/module.json.captured, testdata/beside/mesh-catalog/modules/sensors/module.json.captured, testdata/beside/mesh-catalog/modules/showcase/module.json.captured, testdata/beside/mesh-catalog/modules/slack/module.json.captured, testdata/beside/mesh-catalog/modules/snapd/module.json.captured, testdata/beside/mesh-catalog/modules/ssh-client/module.json.captured, testdata/beside/mesh-catalog/modules/sshd/module.json.captured, testdata/beside/mesh-catalog/modules/step-ca/module.json.captured, testdata/beside/mesh-catalog/modules/sudo/module.json.captured, testdata/beside/mesh-catalog/modules/supabase/module.json.captured, testdata/beside/mesh-catalog/modules/systemd-networkd/module.json.captured, testdata/beside/mesh-catalog/modules/systemd-resolved/module.json.captured, testdata/beside/mesh-catalog/modules/systemd/module.json.captured, testdata/beside/mesh-catalog/modules/telegram/module.json.captured, testdata/beside/mesh-catalog/modules/time-sync/module.json.captured, testdata/beside/mesh-catalog/modules/triggerhappy/module.json.captured, testdata/beside/mesh-catalog/modules/umami/module.json.captured, testdata/beside/mesh-catalog/modules/unifi/module.json.captured, testdata/beside/mesh-catalog/modules/website/module.json.captured, testdata/beside/mesh-catalog/modules/xclip/module.json.captured, testdata/beside/mesh-catalog/modules/xdg/module.json.captured, testdata/beside/mesh-catalog/modules/xorg/module.json.captured, testdata/beside/mesh-catalog/modules/xterm/module.json.captured, testdata/beside/mesh-catalog/modules/zfs/module.json.captured, testdata/beside/mesh-catalog/modules/zsh-autosuggestions/module.json.captured, testdata/beside/mesh-catalog/modules/zsh-syntax-highlighting/module.json.captured, testdata/beside/mesh-catalog/modules/zsh/module.json.captured, testdata/beside/mesh-host/examples/foundation-first-node-nats.lock, testdata/beside/mesh-sdk/conformance/events/module-event.json
Run by the build seat on ace as `build-1791681649187772167` (`builds --log build-1791681649187772167`).
```
--- the gate: mesh-controller
mesh-controller: ok, 56 tool(s); WARNING: merge-window ask(s) for a setting and do(es) not say whether it is trusted, so it counts as trusted: set at the terminal alone; say "trusted" false where nothing trusts it (novox/hq issue 339); WARNING: controller stay(s) up and say(s) not how it is ready — judged by liveness alone, refused from 2026-11-18 (ADR 0240 rule 8)
long-running resources without health: 1
files asking for a setting without saying whether it is trusted: 1
1 manifest(s) checked. Judged against the seats this binary carries; a claim on one of the mesh's own seats is judged fully at registration, and a seat declared by a module not given here reads as unknown. Identities judged on a 6-character machine name, against the bounds of the providers given here
judging 1 module(s) changed against 4 machine(s), as the snapshot of 2026-10-11T01:18:19Z says they run
composing every machine as the mesh is
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
composing every machine with the change
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
merge gate: PASS — every machine composes with the change as it did without (4 of 4 compose)
judged by controller development build against the facts of 2026-10-11T01:18:19Z
modules the change moves:
- mesh-controller (changed)
machines:
- a machine (f35): composes
- holds mesh-dns-resolver (idt): composes
- holds git, holds mesh-artifact-store, holds mesh-broker, holds mesh-catalog, holds mesh-delivery, holds mesh-dns-resolver, holds mesh-store, holds mesh-vault, holds npm-package-registry, the control node, the hub (ygcyr): composes
- a machine (yvbpsm): composes
a merge would rebuild 1 module(s) in 1 tier(s): mesh-controller
notes:
- cmd/mesh-controller/check_test.go, cmd/mesh-controller/merge_gate_test.go, cmd/mesh-controller/network_test.go, internal/beside/beside.go, internal/broker/agreement_catalogue_test.go, internal/broker/genesis_template_test.go, internal/catalogue/amqp_is_not_a_provision_test.go, internal/catalogue/bus_snapshot_test.go, internal/catalogue/catalogue_check_test.go, internal/catalogue/catrust_manifest_test.go, internal/catalogue/environment_into_test.go, internal/catalogue/foundation_manifests_test.go, internal/catalogue/mounts_test.go, internal/catalogue/no_subjects_test.go, internal/catalogue/public_issuer_test.go, internal/catalogue/seat_data_test.go, internal/catalogue/seats_test.go, internal/catalogue/showcase_manifest_test.go, internal/link/conformance_test.go, internal/testbus/testbus_test.go, testdata/beside/CAPTURED, testdata/beside/mesh-catalog/modules/adwaita/module.json.captured, testdata/beside/mesh-catalog/modules/artifact-store-tools/module.json.captured, testdata/beside/mesh-catalog/modules/asus-zephyrus-g14/module.json.captured, testdata/beside/mesh-catalog/modules/audit-logger/module.json.captured, testdata/beside/mesh-catalog/modules/avahi/module.json.captured, testdata/beside/mesh-catalog/modules/baserow/module.json.captured, testdata/beside/mesh-catalog/modules/betterbird/module.json.captured, testdata/beside/mesh-catalog/modules/blueman/module.json.captured, testdata/beside/mesh-catalog/modules/bluetooth/module.json.captured, testdata/beside/mesh-catalog/modules/build-agent/module.json.captured, testdata/beside/mesh-catalog/modules/ca-trust/module.json.captured, testdata/beside/mesh-catalog/modules/claude-code/module.json.captured, testdata/beside/mesh-catalog/modules/claude-licence-manager/module.json.captured, testdata/beside/mesh-catalog/modules/clipmenu/module.json.captured, testdata/beside/mesh-catalog/modules/confluence/module.json.captured, testdata/beside/mesh-catalog/modules/cups/module.json.captured, testdata/beside/mesh-catalog/modules/dbus/module.json.captured, testdata/beside/mesh-catalog/modules/de-spiegel/module.json.captured, testdata/beside/mesh-catalog/modules/desk-channel/module.json.captured, testdata/beside/mesh-catalog/modules/disk-load/module.json.captured, testdata/beside/mesh-catalog/modules/distribution/module.json.captured, testdata/beside/mesh-catalog/modules/dmenu/module.json.captured, testdata/beside/mesh-catalog/modules/dnsmasq/module.json.captured, testdata/beside/mesh-catalog/modules/docker-compose/module.json.captured, testdata/beside/mesh-catalog/modules/docker/module.json.captured, testdata/beside/mesh-catalog/modules/dunst/module.json.captured, testdata/beside/mesh-catalog/modules/fail2ban/module.json.captured, testdata/beside/mesh-catalog/modules/feh/module.json.captured, testdata/beside/mesh-catalog/modules/flatpak/module.json.captured, testdata/beside/mesh-catalog/modules/fonts/module.json.captured, testdata/beside/mesh-catalog/modules/forticlient/module.json.captured, testdata/beside/mesh-catalog/modules/gitea/module.json.captured, testdata/beside/mesh-catalog/modules/gitlab/module.json.captured, testdata/beside/mesh-catalog/modules/gnome-keyring/module.json.captured, testdata/beside/mesh-catalog/modules/grafana/module.json.captured, testdata/beside/mesh-catalog/modules/hello-web/module.json.captured, testdata/beside/mesh-catalog/modules/home-assistant/module.json.captured, testdata/beside/mesh-catalog/modules/hostname/module.json.captured, testdata/beside/mesh-catalog/modules/i3/module.json.captured, testdata/beside/mesh-catalog/modules/i3status-rust/module.json.captured, testdata/beside/mesh-catalog/modules/icecast/module.json.captured, testdata/beside/mesh-catalog/modules/influxdb/module.json.captured, testdata/beside/mesh-catalog/modules/invoicing/module.json.captured, testdata/beside/mesh-catalog/modules/jira/module.json.captured, testdata/beside/mesh-catalog/modules/keycloak/module.json.captured, testdata/beside/mesh-catalog/modules/lab/module.json.captured, testdata/beside/mesh-catalog/modules/lemurs/module.json.captured, testdata/beside/mesh-catalog/modules/letta/module.json.captured, testdata/beside/mesh-catalog/modules/local-model-consumer/module.json.captured, testdata/beside/mesh-catalog/modules/localization/module.json.captured, testdata/beside/mesh-catalog/modules/logrotate/module.json.captured, testdata/beside/mesh-catalog/modules/mailu/module.json.captured, testdata/beside/mesh-catalog/modules/marrytts/module.json.captured, testdata/beside/mesh-catalog/modules/matrix/module.json.captured, testdata/beside/mesh-catalog/modules/memory-pressure/module.json.captured, testdata/beside/mesh-catalog/modules/mesh-catalog/module.json.captured, testdata/beside/mesh-catalog/modules/mesh-cli/module.json.captured, testdata/beside/mesh-catalog/modules/mesh-delivery/module.json.captured, testdata/beside/mesh-catalog/modules/mesh-issues/module.json.captured, testdata/beside/mesh-catalog/modules/mesh-vault/module.json.captured, testdata/beside/mesh-catalog/modules/mesh-watcher/module.json.captured, testdata/beside/mesh-catalog/modules/messenger/module.json.captured, testdata/beside/mesh-catalog/modules/minio/module.json.captured, testdata/beside/mesh-catalog/modules/model-usage/module.json.captured, testdata/beside/mesh-catalog/modules/mongodb/module.json.captured, testdata/beside/mesh-catalog/modules/mosquitto/module.json.captured, testdata/beside/mesh-catalog/modules/mounts/module.json.captured, testdata/beside/mesh-catalog/modules/mssql/module.json.captured, testdata/beside/mesh-catalog/modules/n8n/module.json.captured, testdata/beside/mesh-catalog/modules/nats/Dockerfile, testdata/beside/mesh-catalog/modules/nats/module.json.captured, testdata/beside/mesh-catalog/modules/netcheck/module.json.captured, testdata/beside/mesh-catalog/modules/networkmanager/module.json.captured, testdata/beside/mesh-catalog/modules/nextcloud-client/module.json.captured, testdata/beside/mesh-catalog/modules/nextcloud/module.json.captured, testdata/beside/mesh-catalog/modules/nfs-server/module.json.captured, testdata/beside/mesh-catalog/modules/nftables/module.json.captured, testdata/beside/mesh-catalog/modules/nm-applet/module.json.captured, testdata/beside/mesh-catalog/modules/node-env/module.json.captured, testdata/beside/mesh-catalog/modules/nodered/module.json.captured, testdata/beside/mesh-catalog/modules/ollama/module.json.captured, testdata/beside/mesh-catalog/modules/only-office/module.json.captured, testdata/beside/mesh-catalog/modules/openai-consumer/module.json.captured, testdata/beside/mesh-catalog/modules/openrazer/module.json.captured, testdata/beside/mesh-catalog/modules/pacman/module.json.captured, testdata/beside/mesh-catalog/modules/photos-eef/module.json.captured, testdata/beside/mesh-catalog/modules/photos-filip/module.json.captured, testdata/beside/mesh-catalog/modules/picom/module.json.captured, testdata/beside/mesh-catalog/modules/polychromatic/module.json.captured, testdata/beside/mesh-catalog/modules/postgres/module.json.captured, testdata/beside/mesh-catalog/modules/power/module.json.captured, testdata/beside/mesh-catalog/modules/powerlevel10k/module.json.captured, testdata/beside/mesh-catalog/modules/records/module.json.captured, testdata/beside/mesh-catalog/modules/redis/module.json.captured, testdata/beside/mesh-catalog/modules/restic/module.json.captured, testdata/beside/mesh-catalog/modules/rofi/module.json.captured, testdata/beside/mesh-catalog/modules/route-adapter/module.json.captured, testdata/beside/mesh-catalog/modules/route-proxy/module.json.captured, testdata/beside/mesh-catalog/modules/screen-lock/module.json.captured, testdata/beside/mesh-catalog/modules/searxng/module.json.captured, testdata/beside/mesh-catalog/modules/sensors/module.json.captured, testdata/beside/mesh-catalog/modules/showcase/module.json.captured, testdata/beside/mesh-catalog/modules/slack/module.json.captured, testdata/beside/mesh-catalog/modules/snapd/module.json.captured, testdata/beside/mesh-catalog/modules/ssh-client/module.json.captured, testdata/beside/mesh-catalog/modules/sshd/module.json.captured, testdata/beside/mesh-catalog/modules/step-ca/module.json.captured, testdata/beside/mesh-catalog/modules/sudo/module.json.captured, testdata/beside/mesh-catalog/modules/supabase/module.json.captured, testdata/beside/mesh-catalog/modules/systemd-networkd/module.json.captured, testdata/beside/mesh-catalog/modules/systemd-resolved/module.json.captured, testdata/beside/mesh-catalog/modules/systemd/module.json.captured, testdata/beside/mesh-catalog/modules/telegram/module.json.captured, testdata/beside/mesh-catalog/modules/time-sync/module.json.captured, testdata/beside/mesh-catalog/modules/triggerhappy/module.json.captured, testdata/beside/mesh-catalog/modules/umami/module.json.captured, testdata/beside/mesh-catalog/modules/unifi/module.json.captured, testdata/beside/mesh-catalog/modules/website/module.json.captured, testdata/beside/mesh-catalog/modules/xclip/module.json.captured, testdata/beside/mesh-catalog/modules/xdg/module.json.captured, testdata/beside/mesh-catalog/modules/xorg/module.json.captured, testdata/beside/mesh-catalog/modules/xterm/module.json.captured, testdata/beside/mesh-catalog/modules/zfs/module.json.captured, testdata/beside/mesh-catalog/modules/zsh-autosuggestions/module.json.captured, testdata/beside/mesh-catalog/modules/zsh-syntax-highlighting/module.json.captured, testdata/beside/mesh-catalog/modules/zsh/module.json.captured, testdata/beside/mesh-host/examples/foundation-first-node-nats.lock and testdata/beside/mesh-sdk/conformance/events/module-event.json read by no module's build, and rebuild nothing (issue 280)
--- its merge-check.sh (go toolchain)
ok github.com/novox/mesh-controller/cmd/mesh-builder 1.039s
ok github.com/novox/mesh-controller/cmd/mesh-controller 201.962s
ok github.com/novox/mesh-controller/examples/objectstore-provisioner 1.029s
ok github.com/novox/mesh-controller/examples/postgres-provisioner 1.030s
ok github.com/novox/mesh-controller/examples/redis-provisioner 1.020s
ok github.com/novox/mesh-controller/examples/route-proxy 1.122s
ok github.com/novox/mesh-controller/internal/artifacts 1.062s
? github.com/novox/mesh-controller/internal/beside [no test files]
ok github.com/novox/mesh-controller/internal/broker 2.678s
ok github.com/novox/mesh-controller/internal/builder 2.556s
ok github.com/novox/mesh-controller/internal/catalogue 6.513s
ok github.com/novox/mesh-controller/internal/conditions 2.466s
ok github.com/novox/mesh-controller/internal/envfile 1.028s
ok github.com/novox/mesh-controller/internal/facts 1.026s
ok github.com/novox/mesh-controller/internal/identity 4.237s
ok github.com/novox/mesh-controller/internal/inventory 76.804s
ok github.com/novox/mesh-controller/internal/lease 17.702s
ok github.com/novox/mesh-controller/internal/licences 3.812s
ok github.com/novox/mesh-controller/internal/licences/adapters 1.059s
nats: permissions violation: Permissions Violation for Publish to "mesh.seat.s.tool.v.anchor" on connection [5]
could not read whether b-1 was cancelled, so it is built: nats: no responders available for request
could not read whether b-2 was cancelled, so it is built: nats: no responders available for request
could not read whether b-3 was cancelled, so it is built: nats: no responders available for request
could not read whether b-3 was cancelled, so it is built: nats: no responders available for request
could not read whether w-1 was cancelled, so it is built: nats: no responders available for request
could not read whether w-2 was cancelled, so it is built: nats: no responders available for request
could not read whether w-3 was cancelled, so it is built: nats: no responders available for request
could not read whether build-old-seat was cancelled, so it is built: nats: no responders available for request
--- FAIL: TestTheNatsBusEmitsTheEnvelopeTheFixturePins (0.03s)
bus_test.go:24: mesh-sdk is not beside this check in MESH_CHECK_BESIDE=/var/lib/build-agent/workspace/check, so its agreement with this repository cannot be judged here: stat /var/lib/build-agent/workspace/check/mesh-sdk: no such file or directory
--- FAIL: TestTheGoEmitterSetsEveryRequiredHeader (0.00s)
conformance_test.go:83: mesh-sdk is not beside this check in MESH_CHECK_BESIDE=/var/lib/build-agent/workspace/check, so its agreement with this repository cannot be judged here: stat /var/lib/build-agent/workspace/check/mesh-sdk: no such file or directory
--- FAIL: TestTheGoEmittersHeaderFormatsMatch (0.00s)
conformance_test.go:96: mesh-sdk is not beside this check in MESH_CHECK_BESIDE=/var/lib/build-agent/workspace/check, so its agreement with this repository cannot be judged here: stat /var/lib/build-agent/workspace/check/mesh-sdk: no such file or directory
--- FAIL: TestTheGoSubjectMatchesTheFixture (0.00s)
conformance_test.go:120: mesh-sdk is not beside this check in MESH_CHECK_BESIDE=/var/lib/build-agent/workspace/check, so its agreement with this repository cannot be judged here: stat /var/lib/build-agent/workspace/check/mesh-sdk: no such file or directory
2026/10/11 01:22:47 the notices of messages consumers gave up on cannot be taken, so none is kept until they can: asking about consumer controller on DEAD_LETTER_NOTICES: nats: stream not found
build-cancelled was cancelled by hand as this machine took it; not built
build-waited-cancelled was cancelled by hand as this machine took it; not built
2026/10/11 01:22:59 the notices of messages consumers gave up on cannot be taken, so none is kept until they can: nats: consumer not found
2026/10/11 01:23:14 how sonarr on media hears what it consumes gave up on message 1 of EVENTS (mesh.mod.gitea.event.pull.merged) after 5 deliveries; kept as dead letter 1
2026/10/11 01:23:15 another controller holds the controller's consumer on CONTROL; standing by until it lets go
2026/10/11 01:23:16 took the controller's consumer on CONTROL: the controller that held it let go
2026/10/11 01:23:22 kept what home-server says about the machine, and refused its account of declaration d11 (epoch 57, sequence 11, report 40): the account kept is newer
2026/10/11 01:23:22 kept what home-server says about the machine, and refused its account of declaration d12 (epoch 57, sequence 12, report 40): the account kept is newer
2026/10/11 01:23:25 kept what home-server says about the machine, and not its account of declaration d1: the mesh has sent it d2 since
2026/10/11 01:23:26 anchor took over the tunnel on wg0: its overlay key is the tunnel's now
FAIL
FAIL github.com/novox/mesh-controller/internal/link 50.595s
ok github.com/novox/mesh-controller/internal/lint 2.170s
ok github.com/novox/mesh-controller/internal/outward 1.090s
ok github.com/novox/mesh-controller/internal/overlay 1.038s
ok github.com/novox/mesh-controller/internal/secrets 1.448s
ok github.com/novox/mesh-controller/internal/store 3.331s
ok github.com/novox/mesh-controller/internal/testbus 1.198s
ok github.com/novox/mesh-controller/internal/token 1.018s
FAIL
```
mesh/merge-gate: PASS — every machine composes with the change as it did without (4 of 4 compose) (modules: build-agent, mesh-controller)
mesh/repo-check: FAIL — its merge-check.sh failed: --- FAIL: TestTheNatsBusEmitsTheEnvelopeTheFixturePins (0.03s)
Delivery plan — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step
tier 0: mesh-controller
tier 1: build-agent
ace: receives build-agent
g14: receives build-agent
novox: receives mesh-controller, build-agent
shanks: receives build-agent
build-agent keeps data (ADR 0233): what it holds is backed up before it moves
Run by the build seat on novox as build-1791681953224868173 (builds --log build-1791681953224868173).
--- the gate: build-agent, mesh-controller
mesh-controller: ok, 56 tool(s); WARNING: merge-window ask(s) for a setting and do(es) not say whether it is trusted, so it counts as trusted: set at the terminal alone; say "trusted" false where nothing trusts it (novox/hq issue 339); WARNING: controller stay(s) up and say(s) not how it is ready — judged by liveness alone, refused from 2026-11-18 (ADR 0240 rule 8)
long-running resources without health: 1
files asking for a setting without saying whether it is trusted: 1
1 manifest(s) checked. Judged against the seats this binary carries; a claim on one of the mesh's own seats is judged fully at registration, and a seat declared by a module not given here reads as unknown. Identities judged on a 6-character machine name, against the bounds of the providers given here
judging 1 module(s) changed against 4 machine(s), as the snapshot of 2026-10-11T01:18:19Z says they run
composing every machine as the mesh is
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
composing every machine with the change
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
merge gate: PASS — every machine composes with the change as it did without (4 of 4 compose)
judged by controller development build against the facts of 2026-10-11T01:18:19Z
modules the change moves:
- mesh-controller (changed)
machines:
- a machine (f35): composes
- holds mesh-dns-resolver (idt): composes
- holds git, holds mesh-artifact-store, holds mesh-broker, holds mesh-catalog, holds mesh-delivery, holds mesh-dns-resolver, holds mesh-store, holds mesh-vault, holds npm-package-registry, the control node, the hub (ygcyr): composes
- a machine (yvbpsm): composes
a merge would rebuild 1 module(s) in 1 tier(s): mesh-controller
notes:
- cmd/mesh-controller/merge_gate_test.go, internal/beside/beside.go, internal/link/conformance_sources_test.go, internal/link/conformance_test.go, testdata/beside/CAPTURED and testdata/beside/mesh-sdk/conformance/events/module-event.json read by no module's build, and rebuild nothing (issue 280)
--- its merge-check.sh (go toolchain)
ok github.com/novox/mesh-controller/cmd/mesh-builder 1.094s
ok github.com/novox/mesh-controller/cmd/mesh-controller 283.140s
ok github.com/novox/mesh-controller/examples/objectstore-provisioner 1.022s
ok github.com/novox/mesh-controller/examples/postgres-provisioner 1.030s
ok github.com/novox/mesh-controller/examples/redis-provisioner 1.021s
ok github.com/novox/mesh-controller/examples/route-proxy 1.126s
ok github.com/novox/mesh-controller/internal/artifacts 1.057s
? github.com/novox/mesh-controller/internal/beside [no test files]
ok github.com/novox/mesh-controller/internal/broker 2.912s
ok github.com/novox/mesh-controller/internal/builder 3.882s
ok github.com/novox/mesh-controller/internal/catalogue 8.161s
ok github.com/novox/mesh-controller/internal/conditions 2.578s
ok github.com/novox/mesh-controller/internal/envfile 1.030s
ok github.com/novox/mesh-controller/internal/facts 1.022s
ok github.com/novox/mesh-controller/internal/identity 5.308s
ok github.com/novox/mesh-controller/internal/inventory 115.624s
ok github.com/novox/mesh-controller/internal/lease 19.242s
ok github.com/novox/mesh-controller/internal/licences 4.823s
ok github.com/novox/mesh-controller/internal/licences/adapters 1.013s
nats: permissions violation: Permissions Violation for Publish to "mesh.seat.s.tool.v.anchor" on connection [5]
could not read whether b-1 was cancelled, so it is built: nats: no responders available for request
could not read whether b-2 was cancelled, so it is built: nats: no responders available for request
could not read whether b-3 was cancelled, so it is built: nats: no responders available for request
could not read whether b-3 was cancelled, so it is built: nats: no responders available for request
could not read whether w-2 was cancelled, so it is built: nats: no responders available for request
could not read whether w-1 was cancelled, so it is built: nats: no responders available for request
could not read whether w-3 was cancelled, so it is built: nats: no responders available for request
could not read whether build-old-seat was cancelled, so it is built: nats: no responders available for request
--- FAIL: TestTheNatsBusEmitsTheEnvelopeTheFixturePins (0.03s)
bus_test.go:24: mesh-sdk is not beside this check in MESH_CHECK_BESIDE=/var/lib/build-agent/workspace/check, so the SDK this controller pins cannot be judged here: stat /var/lib/build-agent/workspace/check/mesh-sdk: no such file or directory
--- FAIL: TestTheGoEmitterSetsEveryRequiredHeader (0.00s)
conformance_test.go:195: mesh-sdk is not beside this check in MESH_CHECK_BESIDE=/var/lib/build-agent/workspace/check, so the SDK this controller pins cannot be judged here: stat /var/lib/build-agent/workspace/check/mesh-sdk: no such file or directory
--- FAIL: TestTheGoEmittersHeaderFormatsMatch (0.00s)
conformance_test.go:208: mesh-sdk is not beside this check in MESH_CHECK_BESIDE=/var/lib/build-agent/workspace/check, so the SDK this controller pins cannot be judged here: stat /var/lib/build-agent/workspace/check/mesh-sdk: no such file or directory
--- FAIL: TestTheGoSubjectMatchesTheFixture (0.00s)
conformance_test.go:232: mesh-sdk is not beside this check in MESH_CHECK_BESIDE=/var/lib/build-agent/workspace/check, so the SDK this controller pins cannot be judged here: stat /var/lib/build-agent/workspace/check/mesh-sdk: no such file or directory
2026/10/11 01:29:34 the notices of messages consumers gave up on cannot be taken, so none is kept until they can: asking about consumer controller on DEAD_LETTER_NOTICES: nats: stream not found
build-cancelled was cancelled by hand as this machine took it; not built
build-waited-cancelled was cancelled by hand as this machine took it; not built
2026/10/11 01:29:46 the notices of messages consumers gave up on cannot be taken, so none is kept until they can: nats: consumer not found
2026/10/11 01:30:02 how sonarr on media hears what it consumes gave up on message 1 of EVENTS (mesh.mod.gitea.event.pull.merged) after 5 deliveries; kept as dead letter 1
2026/10/11 01:30:03 another controller holds the controller's consumer on CONTROL; standing by until it lets go
2026/10/11 01:30:03 took the controller's consumer on CONTROL: the controller that held it let go
2026/10/11 01:30:11 kept what home-server says about the machine, and refused its account of declaration d11 (epoch 57, sequence 11, report 40): the account kept is newer
2026/10/11 01:30:12 kept what home-server says about the machine, and refused its account of declaration d12 (epoch 57, sequence 12, report 40): the account kept is newer
2026/10/11 01:30:16 kept what home-server says about the machine, and not its account of declaration d1: the mesh has sent it d2 since
2026/10/11 01:30:17 anchor took over the tunnel on wg0: its overlay key is the tunnel's now
FAIL
FAIL github.com/novox/mesh-controller/internal/link 59.748s
ok github.com/novox/mesh-controller/internal/lint 2.320s
ok github.com/novox/mesh-controller/internal/outward 1.040s
ok github.com/novox/mesh-controller/internal/overlay 1.024s
ok github.com/novox/mesh-controller/internal/secrets 1.504s
ok github.com/novox/mesh-controller/internal/store 3.470s
ok github.com/novox/mesh-controller/internal/testbus 1.196s
ok github.com/novox/mesh-controller/internal/token 1.018s
FAIL
**Merge check** at `63969ceb`
- `mesh/merge-gate`: **PASS** — every machine composes with the change as it did without (4 of 4 compose) (modules: build-agent, mesh-controller)
- `mesh/repo-check`: **FAIL** — its merge-check.sh failed: --- FAIL: TestTheNatsBusEmitsTheEnvelopeTheFixturePins (0.03s)
**Delivery plan** — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step
- tier 0: mesh-controller
- tier 1: build-agent
- ace: receives build-agent
- g14: receives build-agent
- novox: receives mesh-controller, build-agent
- shanks: receives build-agent
- build-agent keeps data (ADR 0233): what it holds is backed up before it moves
Run by the build seat on novox as `build-1791681953224868173` (`builds --log build-1791681953224868173`).
```
--- the gate: build-agent, mesh-controller
mesh-controller: ok, 56 tool(s); WARNING: merge-window ask(s) for a setting and do(es) not say whether it is trusted, so it counts as trusted: set at the terminal alone; say "trusted" false where nothing trusts it (novox/hq issue 339); WARNING: controller stay(s) up and say(s) not how it is ready — judged by liveness alone, refused from 2026-11-18 (ADR 0240 rule 8)
long-running resources without health: 1
files asking for a setting without saying whether it is trusted: 1
1 manifest(s) checked. Judged against the seats this binary carries; a claim on one of the mesh's own seats is judged fully at registration, and a seat declared by a module not given here reads as unknown. Identities judged on a 6-character machine name, against the bounds of the providers given here
judging 1 module(s) changed against 4 machine(s), as the snapshot of 2026-10-11T01:18:19Z says they run
composing every machine as the mesh is
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
composing every machine with the change
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
merge gate: PASS — every machine composes with the change as it did without (4 of 4 compose)
judged by controller development build against the facts of 2026-10-11T01:18:19Z
modules the change moves:
- mesh-controller (changed)
machines:
- a machine (f35): composes
- holds mesh-dns-resolver (idt): composes
- holds git, holds mesh-artifact-store, holds mesh-broker, holds mesh-catalog, holds mesh-delivery, holds mesh-dns-resolver, holds mesh-store, holds mesh-vault, holds npm-package-registry, the control node, the hub (ygcyr): composes
- a machine (yvbpsm): composes
a merge would rebuild 1 module(s) in 1 tier(s): mesh-controller
notes:
- cmd/mesh-controller/merge_gate_test.go, internal/beside/beside.go, internal/link/conformance_sources_test.go, internal/link/conformance_test.go, testdata/beside/CAPTURED and testdata/beside/mesh-sdk/conformance/events/module-event.json read by no module's build, and rebuild nothing (issue 280)
--- its merge-check.sh (go toolchain)
ok github.com/novox/mesh-controller/cmd/mesh-builder 1.094s
ok github.com/novox/mesh-controller/cmd/mesh-controller 283.140s
ok github.com/novox/mesh-controller/examples/objectstore-provisioner 1.022s
ok github.com/novox/mesh-controller/examples/postgres-provisioner 1.030s
ok github.com/novox/mesh-controller/examples/redis-provisioner 1.021s
ok github.com/novox/mesh-controller/examples/route-proxy 1.126s
ok github.com/novox/mesh-controller/internal/artifacts 1.057s
? github.com/novox/mesh-controller/internal/beside [no test files]
ok github.com/novox/mesh-controller/internal/broker 2.912s
ok github.com/novox/mesh-controller/internal/builder 3.882s
ok github.com/novox/mesh-controller/internal/catalogue 8.161s
ok github.com/novox/mesh-controller/internal/conditions 2.578s
ok github.com/novox/mesh-controller/internal/envfile 1.030s
ok github.com/novox/mesh-controller/internal/facts 1.022s
ok github.com/novox/mesh-controller/internal/identity 5.308s
ok github.com/novox/mesh-controller/internal/inventory 115.624s
ok github.com/novox/mesh-controller/internal/lease 19.242s
ok github.com/novox/mesh-controller/internal/licences 4.823s
ok github.com/novox/mesh-controller/internal/licences/adapters 1.013s
nats: permissions violation: Permissions Violation for Publish to "mesh.seat.s.tool.v.anchor" on connection [5]
could not read whether b-1 was cancelled, so it is built: nats: no responders available for request
could not read whether b-2 was cancelled, so it is built: nats: no responders available for request
could not read whether b-3 was cancelled, so it is built: nats: no responders available for request
could not read whether b-3 was cancelled, so it is built: nats: no responders available for request
could not read whether w-2 was cancelled, so it is built: nats: no responders available for request
could not read whether w-1 was cancelled, so it is built: nats: no responders available for request
could not read whether w-3 was cancelled, so it is built: nats: no responders available for request
could not read whether build-old-seat was cancelled, so it is built: nats: no responders available for request
--- FAIL: TestTheNatsBusEmitsTheEnvelopeTheFixturePins (0.03s)
bus_test.go:24: mesh-sdk is not beside this check in MESH_CHECK_BESIDE=/var/lib/build-agent/workspace/check, so the SDK this controller pins cannot be judged here: stat /var/lib/build-agent/workspace/check/mesh-sdk: no such file or directory
--- FAIL: TestTheGoEmitterSetsEveryRequiredHeader (0.00s)
conformance_test.go:195: mesh-sdk is not beside this check in MESH_CHECK_BESIDE=/var/lib/build-agent/workspace/check, so the SDK this controller pins cannot be judged here: stat /var/lib/build-agent/workspace/check/mesh-sdk: no such file or directory
--- FAIL: TestTheGoEmittersHeaderFormatsMatch (0.00s)
conformance_test.go:208: mesh-sdk is not beside this check in MESH_CHECK_BESIDE=/var/lib/build-agent/workspace/check, so the SDK this controller pins cannot be judged here: stat /var/lib/build-agent/workspace/check/mesh-sdk: no such file or directory
--- FAIL: TestTheGoSubjectMatchesTheFixture (0.00s)
conformance_test.go:232: mesh-sdk is not beside this check in MESH_CHECK_BESIDE=/var/lib/build-agent/workspace/check, so the SDK this controller pins cannot be judged here: stat /var/lib/build-agent/workspace/check/mesh-sdk: no such file or directory
2026/10/11 01:29:34 the notices of messages consumers gave up on cannot be taken, so none is kept until they can: asking about consumer controller on DEAD_LETTER_NOTICES: nats: stream not found
build-cancelled was cancelled by hand as this machine took it; not built
build-waited-cancelled was cancelled by hand as this machine took it; not built
2026/10/11 01:29:46 the notices of messages consumers gave up on cannot be taken, so none is kept until they can: nats: consumer not found
2026/10/11 01:30:02 how sonarr on media hears what it consumes gave up on message 1 of EVENTS (mesh.mod.gitea.event.pull.merged) after 5 deliveries; kept as dead letter 1
2026/10/11 01:30:03 another controller holds the controller's consumer on CONTROL; standing by until it lets go
2026/10/11 01:30:03 took the controller's consumer on CONTROL: the controller that held it let go
2026/10/11 01:30:11 kept what home-server says about the machine, and refused its account of declaration d11 (epoch 57, sequence 11, report 40): the account kept is newer
2026/10/11 01:30:12 kept what home-server says about the machine, and refused its account of declaration d12 (epoch 57, sequence 12, report 40): the account kept is newer
2026/10/11 01:30:16 kept what home-server says about the machine, and not its account of declaration d1: the mesh has sent it d2 since
2026/10/11 01:30:17 anchor took over the tunnel on wg0: its overlay key is the tunnel's now
FAIL
FAIL github.com/novox/mesh-controller/internal/link 59.748s
ok github.com/novox/mesh-controller/internal/lint 2.320s
ok github.com/novox/mesh-controller/internal/outward 1.040s
ok github.com/novox/mesh-controller/internal/overlay 1.024s
ok github.com/novox/mesh-controller/internal/secrets 1.504s
ok github.com/novox/mesh-controller/internal/store 3.470s
ok github.com/novox/mesh-controller/internal/testbus 1.196s
ok github.com/novox/mesh-controller/internal/token 1.018s
FAIL
```
A check clones mesh-sdk beside the controller at the commit go.mod pins; elsewhere
the test reads a copy captured at that commit, held to go.mod. A missing clone fails
instead of skipping.
A pull request moving the SDK passed its check against the old SDK and then failed
everywhere once it rolled out. In a merge check the test now reads the clone's history
at the tree's own go.mod pin, and holds the captured copy to the clone byte for byte.
The seat runs the running controller's besideRefs, which clones no mesh-sdk until this
change has rolled out, so a missing clone failing the test kept this change from ever
passing its own check. A follow-up makes it a failure again after the rollout.
mesh/merge-gate: PASS — every machine composes with the change as it did without (4 of 4 compose) (modules: mesh-controller)
mesh/repo-check: PASS — its merge-check.sh passed
Delivery plan — builds mesh-controller → novox; no bus step
tier 0: mesh-controller
novox: receives mesh-controller
Run by the build seat on ace as build-1791685287514522446 (builds --log build-1791685287514522446).
--- the gate: mesh-controller
mesh-controller: ok, 56 tool(s); WARNING: merge-window ask(s) for a setting and do(es) not say whether it is trusted, so it counts as trusted: set at the terminal alone; say "trusted" false where nothing trusts it (novox/hq issue 339); WARNING: controller stay(s) up and say(s) not how it is ready — judged by liveness alone, refused from 2026-11-18 (ADR 0240 rule 8)
long-running resources without health: 1
files asking for a setting without saying whether it is trusted: 1
1 manifest(s) checked. Judged against the seats this binary carries; a claim on one of the mesh's own seats is judged fully at registration, and a seat declared by a module not given here reads as unknown. Identities judged on a 6-character machine name, against the bounds of the providers given here
judging 1 module(s) changed against 4 machine(s), as the snapshot of 2026-10-11T01:58:10Z says they run
composing every machine as the mesh is
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
composing every machine with the change
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
merge gate: PASS — every machine composes with the change as it did without (4 of 4 compose)
judged by controller development build against the facts of 2026-10-11T01:58:10Z
modules the change moves:
- mesh-controller (changed)
machines:
- a machine (f35): composes
- holds mesh-dns-resolver (idt): composes
- holds git, holds mesh-artifact-store, holds mesh-broker, holds mesh-catalog, holds mesh-delivery, holds mesh-dns-resolver, holds mesh-store, holds mesh-vault, holds npm-package-registry, the control node, the hub (ygcyr): composes
- a machine (yvbpsm): composes
a merge would rebuild 1 module(s) in 1 tier(s): mesh-controller
notes:
- cmd/mesh-controller/merge_gate_test.go, internal/beside/beside.go, internal/link/conformance_sources_test.go, internal/link/conformance_test.go, testdata/beside/CAPTURED and testdata/beside/mesh-sdk/conformance/events/module-event.json read by no module's build, and rebuild nothing (issue 280)
--- its merge-check.sh (go toolchain)
ok github.com/novox/mesh-controller/cmd/mesh-builder 1.047s
ok github.com/novox/mesh-controller/cmd/mesh-controller 213.481s
ok github.com/novox/mesh-controller/examples/objectstore-provisioner 1.043s
ok github.com/novox/mesh-controller/examples/postgres-provisioner 1.057s
ok github.com/novox/mesh-controller/examples/redis-provisioner 1.044s
ok github.com/novox/mesh-controller/examples/route-proxy 1.169s
ok github.com/novox/mesh-controller/internal/artifacts 1.089s
? github.com/novox/mesh-controller/internal/beside [no test files]
ok github.com/novox/mesh-controller/internal/broker 2.782s
ok github.com/novox/mesh-controller/internal/builder 2.813s
ok github.com/novox/mesh-controller/internal/catalogue 7.208s
ok github.com/novox/mesh-controller/internal/conditions 2.568s
ok github.com/novox/mesh-controller/internal/envfile 1.052s
ok github.com/novox/mesh-controller/internal/facts 1.056s
ok github.com/novox/mesh-controller/internal/identity 4.669s
ok github.com/novox/mesh-controller/internal/inventory 81.838s
ok github.com/novox/mesh-controller/internal/lease 17.735s
ok github.com/novox/mesh-controller/internal/licences 4.236s
ok github.com/novox/mesh-controller/internal/licences/adapters 1.041s
ok github.com/novox/mesh-controller/internal/link 52.634s
ok github.com/novox/mesh-controller/internal/lint 2.282s
ok github.com/novox/mesh-controller/internal/outward 1.084s
ok github.com/novox/mesh-controller/internal/overlay 1.066s
ok github.com/novox/mesh-controller/internal/secrets 1.497s
ok github.com/novox/mesh-controller/internal/store 3.493s
ok github.com/novox/mesh-controller/internal/testbus 1.246s
ok github.com/novox/mesh-controller/internal/token 1.020s
**Merge check** at `9b6acf0e`
- `mesh/merge-gate`: **PASS** — every machine composes with the change as it did without (4 of 4 compose) (modules: mesh-controller)
- `mesh/repo-check`: **PASS** — its merge-check.sh passed
**Delivery plan** — builds mesh-controller → novox; no bus step
- tier 0: mesh-controller
- novox: receives mesh-controller
Run by the build seat on ace as `build-1791685287514522446` (`builds --log build-1791685287514522446`).
```
--- the gate: mesh-controller
mesh-controller: ok, 56 tool(s); WARNING: merge-window ask(s) for a setting and do(es) not say whether it is trusted, so it counts as trusted: set at the terminal alone; say "trusted" false where nothing trusts it (novox/hq issue 339); WARNING: controller stay(s) up and say(s) not how it is ready — judged by liveness alone, refused from 2026-11-18 (ADR 0240 rule 8)
long-running resources without health: 1
files asking for a setting without saying whether it is trusted: 1
1 manifest(s) checked. Judged against the seats this binary carries; a claim on one of the mesh's own seats is judged fully at registration, and a seat declared by a module not given here reads as unknown. Identities judged on a 6-character machine name, against the bounds of the providers given here
judging 1 module(s) changed against 4 machine(s), as the snapshot of 2026-10-11T01:58:10Z says they run
composing every machine as the mesh is
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
composing every machine with the change
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
merge gate: PASS — every machine composes with the change as it did without (4 of 4 compose)
judged by controller development build against the facts of 2026-10-11T01:58:10Z
modules the change moves:
- mesh-controller (changed)
machines:
- a machine (f35): composes
- holds mesh-dns-resolver (idt): composes
- holds git, holds mesh-artifact-store, holds mesh-broker, holds mesh-catalog, holds mesh-delivery, holds mesh-dns-resolver, holds mesh-store, holds mesh-vault, holds npm-package-registry, the control node, the hub (ygcyr): composes
- a machine (yvbpsm): composes
a merge would rebuild 1 module(s) in 1 tier(s): mesh-controller
notes:
- cmd/mesh-controller/merge_gate_test.go, internal/beside/beside.go, internal/link/conformance_sources_test.go, internal/link/conformance_test.go, testdata/beside/CAPTURED and testdata/beside/mesh-sdk/conformance/events/module-event.json read by no module's build, and rebuild nothing (issue 280)
--- its merge-check.sh (go toolchain)
ok github.com/novox/mesh-controller/cmd/mesh-builder 1.047s
ok github.com/novox/mesh-controller/cmd/mesh-controller 213.481s
ok github.com/novox/mesh-controller/examples/objectstore-provisioner 1.043s
ok github.com/novox/mesh-controller/examples/postgres-provisioner 1.057s
ok github.com/novox/mesh-controller/examples/redis-provisioner 1.044s
ok github.com/novox/mesh-controller/examples/route-proxy 1.169s
ok github.com/novox/mesh-controller/internal/artifacts 1.089s
? github.com/novox/mesh-controller/internal/beside [no test files]
ok github.com/novox/mesh-controller/internal/broker 2.782s
ok github.com/novox/mesh-controller/internal/builder 2.813s
ok github.com/novox/mesh-controller/internal/catalogue 7.208s
ok github.com/novox/mesh-controller/internal/conditions 2.568s
ok github.com/novox/mesh-controller/internal/envfile 1.052s
ok github.com/novox/mesh-controller/internal/facts 1.056s
ok github.com/novox/mesh-controller/internal/identity 4.669s
ok github.com/novox/mesh-controller/internal/inventory 81.838s
ok github.com/novox/mesh-controller/internal/lease 17.735s
ok github.com/novox/mesh-controller/internal/licences 4.236s
ok github.com/novox/mesh-controller/internal/licences/adapters 1.041s
ok github.com/novox/mesh-controller/internal/link 52.634s
ok github.com/novox/mesh-controller/internal/lint 2.282s
ok github.com/novox/mesh-controller/internal/outward 1.084s
ok github.com/novox/mesh-controller/internal/overlay 1.066s
ok github.com/novox/mesh-controller/internal/secrets 1.497s
ok github.com/novox/mesh-controller/internal/store 3.493s
ok github.com/novox/mesh-controller/internal/testbus 1.246s
ok github.com/novox/mesh-controller/internal/token 1.020s
```
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Fixes novox/hq issue 449 (a controller test reads the SDK from a sibling checkout, so it passes or fails by what the desktop holds), step 1 of 2. The branch is rebased onto main (
9d6a12e).Why two steps
The build seat runs the running controller's
besideRefs, and that controller does not clone mesh-sdk. This PR adds the clone, but the clone only appears after this PR has rolled out. If a missing clone failed the test, this PR could never pass its ownmesh/repo-check. So step 1 reads the captured copy when the clone is missing and says so plainly. Step 2, the follow-up below, makes a missing clone a failure again.What changes
internal/link/conformance_test.goread../../../mesh-sdkand skipped when it was missing. Now it reads the SDK this tree's go.mod pins forgit.novox.be/novox/mesh-sdk/go. That pin is a pseudo-version's commit, orgo/<version>for a tagged release. The same applies toTestTheNatsBusEmitsTheEnvelopeTheFixturePinsin bus_test.go, which shares the fixture loader.In a merge check where mesh-sdk is beside the check:
git -c safe.directory=* -C <clone> show <pin>:conformance/.... It does not use the clone's checkout. That way a PR that moves the SDK is judged against the SDK it moves to.testdata/beside/CAPTUREDnames. A copy edited by hand fails.In a merge check where mesh-sdk is not beside the check (today's seat):
NOT JUDGED AGAINST THE CLONE: the seat placed no mesh-sdk beside this check in MESH_CHECK_BESIDE=… (it does once mesh-controller #220 has rolled out); read the captured copy at <commit>. The same line goes once to stderr.go test ./...prints neither the log nor stderr of a passing package unless-vis given. In the seat's report, the line shows only when the package fails or the check runs with-v.Anywhere else: the test reads
testdata/beside/mesh-sdk. That copy was captured withgit archiveat f047d0a4a9702f5d7f3d7eadd3e62496311acc00, the commit go.mod pins. The commit is recorded inCAPTURED, together with how to capture it again.TestTheCapturedSDKIsTheOneGoModPinsfails when go.mod moves the SDK and the captured copy stays behind.The build seat:
besideRefsandcheckRequestFornow clone mesh-sdk beside a controller check, found as the controller's sibling the same way mesh-lab is. Before this PR they did not.sdkPinned, read from the binary's build info). That checkout only places the clone; the test reads the tree's own pin from its history.check-hereget the clone throughbesideRefs.TestACheckByHandClonesWhatTheSeatClonesexpects mesh-sdk at the commit go.mod pins.Tests
internal/link/conformance_sources_test.gobuilds its own small SDK repository with two commits and checks the clone out at the older one, so it needs nothing from the seat. It covers these cases:Shown to fail
x-node: FAIL.git showat the pin: FAIL.besideRefswithout mesh-sdk: FAIL.CAPTUREDcommit that differs from go.mod's pin: FAIL.gofmt -lreports nothing,go vet ./...is clean, andgo test ./internal/link/ ./cmd/mesh-controller/ -count=1passes.go test ./internal/link/withMESH_CHECK_BESIDEpointing at an empty directory, which is today's seat, passes and logs NOT JUDGED.make checkwas not run.The link tests need
gitin the check's Go toolchain for the fixture tests in conformance_sources_test.go, and for reading the clone once the seat places one. This PR'smesh/repo-checkwill show whether git is there.Follow-up (step 2): after this PR has rolled out, on a new branch from main
First confirm that a controller check's seat log says
beside it mesh-sdk at …. Then, ininternal/link/conformance_test.gosdkFixture:notJudged, withreturn nil, "", fmt.Errorf("mesh-sdk is not beside this check in %s=%s, so the SDK this controller pins cannot be judged here: %w", beside.Env, root, err);notJudgedandsaidNotJudgedand their use inloadFixture;conformance_sources_test.go, replaceTestAMergeCheckWithoutTheCloneSaysItReadTheCapturedCopywith a test thatsdkFixture(t.TempDir(), …)returns an error containing "not beside this check";That makes a missing mesh-sdk clone in a merge check fail again, as the catalogue and mesh-host clones already do (issue 432).
Delivery
novox/mesh-controller@9b6acf0ef53c— delivered since 2026-10-11T09:15:44ZDelivery plan — builds mesh-controller → novox; no bus step
Machines
Transitions
The commit's note under
refs/notes/mesh-plankeeps every transition:git log --notes=mesh-plan.833d30466fto63969ceb14Rebased onto main (
8305e4e, #217 merged), so this PR is no longer stacked on #217. Pushed63969ceto address the review's finding.What changed: in a merge check, the conformance test now reads the fixture at the pin in the tree's own go.mod. That pin is a pseudo-version's commit, or
go/<version>for a tagged release. The test reads it withgit -c safe.directory=* -C <clone> show <ref>:conformance/...from the mesh-sdk clone beside the check. Before, it read the clone's checkout, which is the running controller's pin. The clone's checkout now only decides where the clone sits, andbesideRefs/sdkPinnedsay so in a comment. If the clone is missing, or lacks the pin, the test fails and names the pin. The merge check also compares the captured copy with the clone at the commit CAPTURED names, byte for byte, so a captured copy edited by hand fails.This replaces the limit stated in the PR description: a PR that moves the SDK is now judged against the SDK it moves to.
New tests (
internal/link/conformance_sources_test.go) use a two-commit SDK repository of their own, with the clone checked out at the older commit:Shown to fail without the change:
git showat the pin: the test reads "older" while the tree pins the newer commit, FAIL;Checked against the real mesh-sdk clone with
MESH_CHECK_BESIDE:gofmt -lreports nothing,go vet ./...is clean, andgo test ./internal/link/ ./cmd/mesh-controller/ -count=1passes.The link tests now need
gitin the check's toolchain, asgit showdoes.Merge check at
833d3046mesh/merge-gate: PASS — every machine composes with the change as it did without (4 of 4 compose) (modules: mesh-controller)mesh/repo-check: FAIL — its merge-check.sh failed: --- FAIL: TestTheNatsBusEmitsTheEnvelopeTheFixturePins (0.03s)Delivery plan — builds mesh-controller → novox; no bus step
Run by the build seat on ace as
build-1791681649187772167(builds --log build-1791681649187772167).Merge check at
63969cebmesh/merge-gate: PASS — every machine composes with the change as it did without (4 of 4 compose) (modules: build-agent, mesh-controller)mesh/repo-check: FAIL — its merge-check.sh failed: --- FAIL: TestTheNatsBusEmitsTheEnvelopeTheFixturePins (0.03s)Delivery plan — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step
Run by the build seat on novox as
build-1791681953224868173(builds --log build-1791681953224868173).63969ceb14to9b6acf0ef5Merge check at
9b6acf0emesh/merge-gate: PASS — every machine composes with the change as it did without (4 of 4 compose) (modules: mesh-controller)mesh/repo-check: PASS — its merge-check.sh passedDelivery plan — builds mesh-controller → novox; no bus step
Run by the build seat on ace as
build-1791685287514522446(builds --log build-1791685287514522446).