Fixes hq issue 754, seen on 2026-10-14 at 23:37: a rebuild route-proxy landed while mesh-catalog's rollout plan waited for mesh-delivery's word, and was recorded as the plan's build. When the plan was let go, advanceOnce asked a tier only if every module in it was unasked, so build-agent and gitea were never asked and the plan sat silently until it was stopped by hand.
takesOutcome: a plan takes no build outcome while it waits for its word, nor for a module it never asked (no build id and no ask time); planBuiltSaying makes no module state for an outcome it did not wait for. This is the root fix.
advanceOnce asks whatever unaskedOf returns, not only an all-unasked tier; askTier takes the names. A module read built with no build id and no ask time (the shape only the bug made) is asked again, so a hand rebuild is never shipped as the plan's own build (ADR 0219).
joinAPlan no longer joins a waiting plan; rebuild says it builds beside the plan and why.
The one-rollout-at-a-time check still runs while tier 0 has asked nothing. A let-go plan that stops progressing stays covered by the existing S3 plan.<id>.stalled.
Tests: walk_wait_rebuild_754_test.go (the live shape from the store fails on main, passes here); a fixture in queue_test.go held an impossible state (built with no ask) and now records its ask. gofmt, go vet, merge-check.sh with the store tests pass.
Reviewed independently before push: APPROVE at 9f072c110c (the reviewer traced every writer of a module's built state).
Fixes hq issue 754, seen on 2026-10-14 at 23:37: a `rebuild route-proxy` landed while mesh-catalog's rollout plan waited for mesh-delivery's word, and was recorded as the plan's build. When the plan was let go, `advanceOnce` asked a tier only if every module in it was unasked, so build-agent and gitea were never asked and the plan sat silently until it was stopped by hand.
- `takesOutcome`: a plan takes no build outcome while it waits for its word, nor for a module it never asked (no build id and no ask time); `planBuiltSaying` makes no module state for an outcome it did not wait for. This is the root fix.
- `advanceOnce` asks whatever `unaskedOf` returns, not only an all-unasked tier; `askTier` takes the names. A module read `built` with no build id and no ask time (the shape only the bug made) is asked again, so a hand rebuild is never shipped as the plan's own build (ADR 0219).
- `joinAPlan` no longer joins a waiting plan; `rebuild` says it builds beside the plan and why.
- The one-rollout-at-a-time check still runs while tier 0 has asked nothing. A let-go plan that stops progressing stays covered by the existing S3 `plan.<id>.stalled`.
Tests: walk_wait_rebuild_754_test.go (the live shape from the store fails on main, passes here); a fixture in queue_test.go held an impossible state (built with no ask) and now records its ask. gofmt, go vet, merge-check.sh with the store tests pass.
Reviewed independently before push: APPROVE at 9f072c110c14c7f00fc20d7d18988cbebfb0a6a1 (the reviewer traced every writer of a module's built state).
mesh/merge-gate head 9f072c110c14 merged into trunk 60cc9ec363df — pass: builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step; every …
A rebuild that landed while a walk waited for mesh-delivery's word was taken as
the walk's build of that module; once let go, the walk asked a tier only when
every module of it was unasked, so it never asked the rest and stood still.
A walk now takes only the outcomes of builds it asked, and none while it waits;
a rebuild does not join a waiting walk and says it runs beside it; and a tier
asked in part is asked the rest, including a module held built that the walk
never asked for, which is somebody else's build and not sent as the walk's.
Deliverynovox/mesh-controller@9f072c110c14 — delivered since 2026-10-14T22:08:43Z
Delivery plan — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step
tier 0: mesh-controller
tier 1: build-agent
ace: receives build-agent
g14: receives build-agent
novox: receives mesh-controller, build-agent
shanks: receives build-agent
build-agent keeps data (ADR 0233): what it holds is backed up before it moves
grants step: if this changes what the bus's user list says (a new tool, subject or user), novox is sent that list alone, every build there kept, before build-agent is judged on its first machine
Machines
mesh-controller on every machine running it: sent
Transitions
2026-10-14 22:03 (new) → proposed (announced): novox/mesh-controller#340's head announced
2026-10-14 22:06 proposed → checked (checked): a verdict names this commit and the trunk's head as its trunk commit
2026-10-14 22:06 checked → ready (accepted): the gate passed or warned, and the repository's own check did not fail
2026-10-14 22:07 ready → published (merged): on the trunk its modules follow: merged there, and its walk opened — or nothing for a walk to move
2026-10-14 22:07 published → delivering (go): its walk started: let go by this owner in its group's order, by a person, or on the controller's own path — not a failed walk that carried a later commit for it, after which it waits for a walk of its own commit
2026-10-14 22:08 delivering → delivered (done): its walk is done, carrying its own commit: every machine of its deploy plan passed, or was left as its policy says
The commit's note under refs/notes/mesh-plan keeps every transition: git log --notes=mesh-plan.
<!-- mesh-delivery:view -->
**Delivery** `novox/mesh-controller@9f072c110c14` — **delivered** since 2026-10-14T22:08:43Z
**Delivery plan** — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step
- tier 0: mesh-controller
- tier 1: build-agent
- ace: receives build-agent
- g14: receives build-agent
- novox: receives mesh-controller, build-agent
- shanks: receives build-agent
- build-agent keeps data (ADR 0233): what it holds is backed up before it moves
- grants step: if this changes what the bus's user list says (a new tool, subject or user), novox is sent that list alone, every build there kept, before build-agent is judged on its first machine
**Machines**
- mesh-controller on every machine running it: sent
**Transitions**
- 2026-10-14 22:03 (new) → proposed (announced): novox/mesh-controller#340's head announced
- 2026-10-14 22:06 proposed → checked (checked): a verdict names this commit and the trunk's head as its trunk commit
- 2026-10-14 22:06 checked → ready (accepted): the gate passed or warned, and the repository's own check did not fail
- 2026-10-14 22:07 ready → published (merged): on the trunk its modules follow: merged there, and its walk opened — or nothing for a walk to move
- 2026-10-14 22:07 published → delivering (go): its walk started: let go by this owner in its group's order, by a person, or on the controller's own path — not a failed walk that carried a later commit for it, after which it waits for a walk of its own commit
- 2026-10-14 22:08 delivering → delivered (done): its walk is done, carrying its own commit: every machine of its deploy plan passed, or was left as its policy says
The commit's note under `refs/notes/mesh-plan` keeps every transition: `git log --notes=mesh-plan`.
Merge check at 9f072c11
Judged: head 9f072c110c14 merged into trunk 60cc9ec363df; read beside it: mesh-catalog 7913b56d66f7, mesh-controller-main 60cc9ec363df, mesh-host 1a2677882380, mesh-tools 5d70eb3e35a9
mesh/merge-gate: PASS — every machine composes with the change as it did without (4 of 4 compose) (modules: build-agent, mesh-controller)
mesh/repo-check: PASS — its merge-check.sh passed
Delivery plan — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step
tier 0: mesh-controller
tier 1: build-agent
ace: receives build-agent
g14: receives build-agent
novox: receives mesh-controller, build-agent
shanks: receives build-agent
build-agent keeps data (ADR 0233): what it holds is backed up before it moves
grants step: if this changes what the bus's user list says (a new tool, subject or user), novox is sent that list alone, every build there kept, before build-agent is judged on its first machine
Run by the build seat on shanks as build-1792015412269714001 (builds --log build-1792015412269714001).
--- the gate: build-agent, mesh-controller
mesh-controller: ok, 60 tool(s); WARNING: merge-window ask(s) for a setting and do(es) not say whether it is trusted, so it counts as trusted: set at the terminal alone; say "trusted" false where nothing trusts it (novox/hq issue 339); WARNING: controller stay(s) up and say(s) not how it is ready — judged by liveness alone, refused from 2026-11-18 (ADR 0240 rule 8)
long-running resources without health: 1
files asking for a setting without saying whether it is trusted: 1
1 manifest(s) checked. Judged against the seats this binary carries; a claim on one of the mesh's own seats is judged fully at registration, and a seat declared by a module not given here reads as unknown. Identities judged on a 6-character machine name, against the bounds of the providers given here
judging 1 module(s) changed against 4 machine(s), as the snapshot of 2026-10-14T21:59:19Z says they run
composing every machine as the mesh is
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
composing every machine with the change
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
merge gate: PASS — every machine composes with the change as it did without (4 of 4 compose)
judged by controller development build against the facts of 2026-10-14T21:59:19Z
modules the change moves:
- mesh-controller (changed)
machines:
- a machine (f35): composes
- holds mesh-dns-resolver (idt): composes
- holds git, holds mesh-artifact-store, holds mesh-broker, holds mesh-catalog, holds mesh-delivery, holds mesh-dns-resolver, holds mesh-store, holds mesh-vault, holds npm-package-registry, the control node, the hub (ygcyr): composes
- a machine (yvbpsm): composes
a merge would rebuild 2 module(s) in 2 tier(s): build-agent, mesh-controller
--- its merge-check.sh (go toolchain)
ok github.com/novox/mesh-controller/cmd/mesh-builder 1.116s
ok github.com/novox/mesh-controller/examples/objectstore-provisioner 1.016s
ok github.com/novox/mesh-controller/examples/postgres-provisioner 1.023s
ok github.com/novox/mesh-controller/examples/redis-provisioner 1.020s
ok github.com/novox/mesh-controller/examples/route-proxy 1.164s
ok github.com/novox/mesh-controller/internal/artifacts 1.053s
? github.com/novox/mesh-controller/internal/beside [no test files]
ok github.com/novox/mesh-controller/internal/broker 6.150s
ok github.com/novox/mesh-controller/internal/catalogue 16.308s
ok github.com/novox/mesh-controller/internal/conditions 2.835s
ok github.com/novox/mesh-controller/internal/envfile 1.042s
ok github.com/novox/mesh-controller/internal/facts 1.045s
ok github.com/novox/mesh-controller/internal/identity 7.377s
ok github.com/novox/mesh-controller/internal/lease 10.232s
ok github.com/novox/mesh-controller/internal/licences 5.454s
ok github.com/novox/mesh-controller/internal/licences/adapters 1.038s
ok github.com/novox/mesh-controller/internal/lint 3.074s
ok github.com/novox/mesh-controller/internal/outward 1.094s
ok github.com/novox/mesh-controller/internal/overlay 1.059s
ok github.com/novox/mesh-controller/internal/secrets 1.567s
ok github.com/novox/mesh-controller/internal/store 3.802s
ok github.com/novox/mesh-controller/internal/testbus 1.278s
ok github.com/novox/mesh-controller/internal/token 1.052s
ok github.com/novox/mesh-controller/cmd/mesh-controller 27s (shard 1 of 8: 116 tests)
ok github.com/novox/mesh-controller/cmd/mesh-controller 35s (shard 2 of 8: 116 tests)
ok github.com/novox/mesh-controller/cmd/mesh-controller 39s (shard 3 of 8: 116 tests)
ok github.com/novox/mesh-controller/cmd/mesh-controller 32s (shard 4 of 8: 116 tests)
ok github.com/novox/mesh-controller/cmd/mesh-controller 31s (shard 5 of 8: 116 tests)
ok github.com/novox/mesh-controller/cmd/mesh-controller 26s (shard 6 of 8: 116 tests)
ok github.com/novox/mesh-controller/cmd/mesh-controller 32s (shard 7 of 8: 116 tests)
ok github.com/novox/mesh-controller/cmd/mesh-controller 30s (shard 8 of 8: 116 tests)
ok github.com/novox/mesh-controller/internal/inventory 17s (shard 1 of 4: 69 tests)
ok github.com/novox/mesh-controller/internal/inventory 15s (shard 2 of 4: 68 tests)
ok github.com/novox/mesh-controller/internal/inventory 16s (shard 3 of 4: 68 tests)
ok github.com/novox/mesh-controller/internal/inventory 17s (shard 4 of 4: 68 tests)
ok github.com/novox/mesh-controller/internal/builder 39s (shard 1 of 4: 52 tests)
ok github.com/novox/mesh-controller/internal/builder 16s (shard 2 of 4: 51 tests)
ok github.com/novox/mesh-controller/internal/builder 33s (shard 3 of 4: 51 tests)
ok github.com/novox/mesh-controller/internal/builder 19s (shard 4 of 4: 51 tests)
ok github.com/novox/mesh-controller/internal/link 14s (shard 1 of 4: 44 tests)
ok github.com/novox/mesh-controller/internal/link 20s (shard 2 of 4: 44 tests)
ok github.com/novox/mesh-controller/internal/link 14s (shard 3 of 4: 44 tests)
ok github.com/novox/mesh-controller/internal/link 17s (shard 4 of 4: 44 tests)
store tests, each run against the store:
./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeWalksTheOthersAgain (0.61s)
./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeEndsTheMergesThatContainIt (0.47s)
./cmd/mesh-controller --- PASS: TestAStopWalksTheOthersAgainInTheOpenBatch (0.42s)
./cmd/mesh-controller --- PASS: TestAStopNamesWhatStaysOnTheMachinesAndWhatStillCarriesIt (0.43s)
./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeLeavesItOutOfABatch (0.44s)
./cmd/mesh-controller --- PASS: TestSavingPlansAndMovingMergesIsOneAct (0.34s)
./cmd/mesh-controller --- PASS: TestAPlanFollowedFromTheStoreAnswersWhenItMoves (2.03s)
./cmd/mesh-controller --- PASS: TestNodeShowAndStatusReadTheLastSendFromTheStore (0.36s)
./cmd/mesh-controller --- PASS: TestTheConditionsVerbReadsTheLooksTheBucketNoLongerHolds (0.25s)
./cmd/mesh-controller --- PASS: TestAWalkLetGoAndStoppedByVerbsIsSaidStartedAndEnded (0.36s)
./cmd/mesh-controller --- PASS: TestAWalkStoppedOrClosedByAPersonIsSaidEndedStopped (0.35s)
./cmd/mesh-controller --- PASS: TestAWalkRetriedByAPersonIsSaidStartedAgain (0.28s)
./cmd/mesh-controller --- PASS: TestABacklogReleasedByAPersonIsSaidStarted (0.32s)
./cmd/mesh-controller --- PASS: TestAWalkEndedByCancelOrClearIsSaidEnded (0.35s)
./cmd/mesh-controller --- PASS: TestAWalkRestartedByARebuildIsSaidStarted (0.32s)
./cmd/mesh-controller --- PASS: TestAWalkStoppedByHandAndRetriedEndsFailedWhenItFailsAgain (0.39s)
./cmd/mesh-controller --- PASS: TestReplay237 (0.23s)
./cmd/mesh-controller --- PASS: TestAnUnassignThatLeavesItsNodeUnresolvedSaysSoOnceInItsAnswer (0.28s)
./cmd/mesh-controller --- PASS: TestAnUnassignThatLeavesItsNodeResolvedSaysNothingOfIt (0.27s)
./cmd/mesh-controller --- PASS: TestAnAssignThatLeavesItsNodeUnresolvedSaysOnlyThePlansRefusal (0.41s)
./cmd/mesh-controller --- PASS: TestADirectoryOwnersKeyIsRefusedThroughAVerb (0.35s)
./cmd/mesh-controller --- PASS: TestTheSendMakesNoValueForAnOutsideSecretNobodyGave (0.44s)
./cmd/mesh-controller --- PASS: TestAQuestionComposesWithoutAnOutsideSecretNobodyGave (0.32s)
./cmd/mesh-controller --- PASS: TestReplay201 (0.38s)
./cmd/mesh-controller --- PASS: TestARollbackWhoseSendWasRefusedIsCompletedByTheNextSend (0.36s)
./cmd/mesh-controller --- PASS: TestAGateJudgesTheOtherMovesBesideAKeptCore (0.44s)
./cmd/mesh-controller --- PASS: TestReplay401 (0.30s)
./cmd/mesh-controller --- PASS: TestReplay201ThePlansSend (0.28s)
./cmd/mesh-controller --- PASS: TestPlanAndNodeListAnOptionalRequirementLeftUnbound (0.49s)
./cmd/mesh-controller --- PASS: TestReplay340 (0.32s)
./cmd/mesh-controller --- PASS: TestOnlyATrustedFilesNamedKeyIsRefusedThroughAVerb (0.29s)
./cmd/mesh-controller --- PASS: TestReplay349 (0.21s)
./cmd/mesh-controller --- PASS: TestReplay348AFaultFromBeforeTheSendFailsNoGate (0.20s)
./cmd/mesh-controller --- PASS: TestReplay239AModuleNameIsNotTakenOverByAnotherRepository (0.21s)
./cmd/mesh-controller --- PASS: TestAWalkThatMovedNothingSaysWhichModulesMatchedWhatRuns (0.42s)
./cmd/mesh-controller --- PASS: TestAWalkWhoseEveryBuildCameOutTheSameIsDone (0.27s)
./cmd/mesh-controller --- PASS: TestReplay614ANewSDKPlansTheToolchainAndThenItsBundles (0.09s)
./cmd/mesh-controller --- PASS: TestOneAcceptForAProviderIsPlacedForEveryConsumer (0.71s)
./cmd/mesh-controller --- PASS: TestReplay164 (0.33s)
./cmd/mesh-controller --- PASS: TestAnApprovedLayerOpensTheWalkThatSendsIt (0.31s)
./cmd/mesh-controller --- PASS: TestASettingsWalkSendsOneMachineAtATimeEachJudged (0.29s)
./cmd/mesh-controller --- PASS: TestAFailedSettingsWalkStopsAndHoldsNothingBack (0.30s)
./cmd/mesh-controller --- PASS: TestASettingsWalkSendsTheLayerAloneEveryBuildKept (0.29s)
./cmd/mesh-controller --- PASS: TestASettingsWalkStopsBeforeADataMoveAndPassesOverAMachineAway (0.91s)
./cmd/mesh-controller --- PASS: TestACrossingSendSupersedesASettingsGate (0.35s)
./cmd/mesh-controller --- PASS: TestASettingsWalkFailsOnARefusalThatCannotClear (0.28s)
./cmd/mesh-controller --- PASS: TestAProviderElsewhereServesItsOwnComposedName (0.50s)
./cmd/mesh-controller --- PASS: TestAReusedCheckBuildIsRegisteredByItsDigestAndGatedAsABuiltOne (0.84s)
./cmd/mesh-controller --- PASS: TestAReleaseSendsTheRestAtOnceAfterTheFirstPasses (0.37s)
./cmd/mesh-controller --- PASS: TestARestMachineThatFailsIsPutBackAloneAndTheOthersAreJudgedOn (0.49s)
./cmd/mesh-controller --- PASS: TestAWalkTakesOverTheReadingsOfAGateJudgingTheSameBuildThere (0.35s)
./cmd/mesh-controller --- PASS: TestAFirstSendMadeAndNotKeptIsNotSentAgain (0.47s)
./cmd/mesh-controller --- PASS: TestAReleaseSendKeptAndMadeIsNotMadeAgain (0.30s)
./cmd/mesh-controller --- PASS: TestAFirstMachineThatFailsStillStopsTheWalk (0.46s)
./cmd/mesh-controller --- PASS: TestTheControlNodeIsSentLastInAStep (0.53s)
./cmd/mesh-controller --- PASS: TestARestMachineSilentPastItsBoundIsLeftAndSaid (0.41s)
./cmd/mesh-controller --- PASS: TestANoMoveTierWaitsForNoNewReport (0.41s)
./cmd/mesh-controller --- PASS: TestOneProviderDownAndThreeConsumersFailingAreOneCondition (0.19s)
./cmd/mesh-controller --- PASS: TestAConsumerFailingBesideAHealthyProviderIsItsOwn (0.18s)
./internal/inventory --- PASS: TestTheLastSendSaysWhatTheMachineAnswered (0.15s)
./internal/inventory --- PASS: TestAReportIsTheLastSendsAnswerOnlyWhenItIsAboutThatSend (0.14s)
./internal/inventory --- PASS: TestAnIssuedValueIsSealedToEveryHolderOnceAndNotAgain (0.21s)
./internal/inventory --- PASS: TestAnIssuedValueIsSealedAgainAfterAKeyChangeOrAnAcceptance (0.15s)
./internal/inventory --- PASS: TestAConditionsLooksAreKeptBesideTheBucket (0.10s)
./internal/inventory --- PASS: TestAPlanIdHoldingAQuoteIsReadAsAPlainId (0.18s)
./internal/inventory --- PASS: TestAWalksStartIsKeptAndARefusedSaveLeavesItUnsaid (0.11s)
./internal/inventory --- PASS: TestAWalksRestIsReadFromEachMachinesOwnSend (0.14s)
./internal/inventory --- PASS: TestAStoredBuildWithASilentMergeableFileIsStillReadAndComposed (0.14s)
./internal/inventory --- PASS: TestACredentialIssuedOutsideIsNeverMade (0.12s)
./internal/inventory --- PASS: TestOneAcceptForAProviderIsSealedToEveryConsumer (0.10s)
./internal/inventory --- PASS: TestASharedOwnSecretIssuedOutsideIsNeverMade (0.14s)
./internal/inventory --- PASS: TestAReportOfABusyContainerIsKeptAndReadBack (0.74s)
./internal/inventory --- PASS: TestWhatRunsIsTheRegisteredBuildNotANewerOnePutBack (0.13s)
**Merge check** at `9f072c11`
Judged: head `9f072c110c14` merged into trunk `60cc9ec363df`; read beside it: mesh-catalog `7913b56d66f7`, mesh-controller-main `60cc9ec363df`, mesh-host `1a2677882380`, mesh-tools `5d70eb3e35a9`
- `mesh/merge-gate`: **PASS** — every machine composes with the change as it did without (4 of 4 compose) (modules: build-agent, mesh-controller)
- `mesh/repo-check`: **PASS** — its merge-check.sh passed
**Delivery plan** — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step
- tier 0: mesh-controller
- tier 1: build-agent
- ace: receives build-agent
- g14: receives build-agent
- novox: receives mesh-controller, build-agent
- shanks: receives build-agent
- build-agent keeps data (ADR 0233): what it holds is backed up before it moves
- grants step: if this changes what the bus's user list says (a new tool, subject or user), novox is sent that list alone, every build there kept, before build-agent is judged on its first machine
Run by the build seat on shanks as `build-1792015412269714001` (`builds --log build-1792015412269714001`).
```
--- the gate: build-agent, mesh-controller
mesh-controller: ok, 60 tool(s); WARNING: merge-window ask(s) for a setting and do(es) not say whether it is trusted, so it counts as trusted: set at the terminal alone; say "trusted" false where nothing trusts it (novox/hq issue 339); WARNING: controller stay(s) up and say(s) not how it is ready — judged by liveness alone, refused from 2026-11-18 (ADR 0240 rule 8)
long-running resources without health: 1
files asking for a setting without saying whether it is trusted: 1
1 manifest(s) checked. Judged against the seats this binary carries; a claim on one of the mesh's own seats is judged fully at registration, and a seat declared by a module not given here reads as unknown. Identities judged on a 6-character machine name, against the bounds of the providers given here
judging 1 module(s) changed against 4 machine(s), as the snapshot of 2026-10-14T21:59:19Z says they run
composing every machine as the mesh is
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
composing every machine with the change
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
merge gate: PASS — every machine composes with the change as it did without (4 of 4 compose)
judged by controller development build against the facts of 2026-10-14T21:59:19Z
modules the change moves:
- mesh-controller (changed)
machines:
- a machine (f35): composes
- holds mesh-dns-resolver (idt): composes
- holds git, holds mesh-artifact-store, holds mesh-broker, holds mesh-catalog, holds mesh-delivery, holds mesh-dns-resolver, holds mesh-store, holds mesh-vault, holds npm-package-registry, the control node, the hub (ygcyr): composes
- a machine (yvbpsm): composes
a merge would rebuild 2 module(s) in 2 tier(s): build-agent, mesh-controller
--- its merge-check.sh (go toolchain)
ok github.com/novox/mesh-controller/cmd/mesh-builder 1.116s
ok github.com/novox/mesh-controller/examples/objectstore-provisioner 1.016s
ok github.com/novox/mesh-controller/examples/postgres-provisioner 1.023s
ok github.com/novox/mesh-controller/examples/redis-provisioner 1.020s
ok github.com/novox/mesh-controller/examples/route-proxy 1.164s
ok github.com/novox/mesh-controller/internal/artifacts 1.053s
? github.com/novox/mesh-controller/internal/beside [no test files]
ok github.com/novox/mesh-controller/internal/broker 6.150s
ok github.com/novox/mesh-controller/internal/catalogue 16.308s
ok github.com/novox/mesh-controller/internal/conditions 2.835s
ok github.com/novox/mesh-controller/internal/envfile 1.042s
ok github.com/novox/mesh-controller/internal/facts 1.045s
ok github.com/novox/mesh-controller/internal/identity 7.377s
ok github.com/novox/mesh-controller/internal/lease 10.232s
ok github.com/novox/mesh-controller/internal/licences 5.454s
ok github.com/novox/mesh-controller/internal/licences/adapters 1.038s
ok github.com/novox/mesh-controller/internal/lint 3.074s
ok github.com/novox/mesh-controller/internal/outward 1.094s
ok github.com/novox/mesh-controller/internal/overlay 1.059s
ok github.com/novox/mesh-controller/internal/secrets 1.567s
ok github.com/novox/mesh-controller/internal/store 3.802s
ok github.com/novox/mesh-controller/internal/testbus 1.278s
ok github.com/novox/mesh-controller/internal/token 1.052s
ok github.com/novox/mesh-controller/cmd/mesh-controller 27s (shard 1 of 8: 116 tests)
ok github.com/novox/mesh-controller/cmd/mesh-controller 35s (shard 2 of 8: 116 tests)
ok github.com/novox/mesh-controller/cmd/mesh-controller 39s (shard 3 of 8: 116 tests)
ok github.com/novox/mesh-controller/cmd/mesh-controller 32s (shard 4 of 8: 116 tests)
ok github.com/novox/mesh-controller/cmd/mesh-controller 31s (shard 5 of 8: 116 tests)
ok github.com/novox/mesh-controller/cmd/mesh-controller 26s (shard 6 of 8: 116 tests)
ok github.com/novox/mesh-controller/cmd/mesh-controller 32s (shard 7 of 8: 116 tests)
ok github.com/novox/mesh-controller/cmd/mesh-controller 30s (shard 8 of 8: 116 tests)
ok github.com/novox/mesh-controller/internal/inventory 17s (shard 1 of 4: 69 tests)
ok github.com/novox/mesh-controller/internal/inventory 15s (shard 2 of 4: 68 tests)
ok github.com/novox/mesh-controller/internal/inventory 16s (shard 3 of 4: 68 tests)
ok github.com/novox/mesh-controller/internal/inventory 17s (shard 4 of 4: 68 tests)
ok github.com/novox/mesh-controller/internal/builder 39s (shard 1 of 4: 52 tests)
ok github.com/novox/mesh-controller/internal/builder 16s (shard 2 of 4: 51 tests)
ok github.com/novox/mesh-controller/internal/builder 33s (shard 3 of 4: 51 tests)
ok github.com/novox/mesh-controller/internal/builder 19s (shard 4 of 4: 51 tests)
ok github.com/novox/mesh-controller/internal/link 14s (shard 1 of 4: 44 tests)
ok github.com/novox/mesh-controller/internal/link 20s (shard 2 of 4: 44 tests)
ok github.com/novox/mesh-controller/internal/link 14s (shard 3 of 4: 44 tests)
ok github.com/novox/mesh-controller/internal/link 17s (shard 4 of 4: 44 tests)
store tests, each run against the store:
./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeWalksTheOthersAgain (0.61s)
./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeEndsTheMergesThatContainIt (0.47s)
./cmd/mesh-controller --- PASS: TestAStopWalksTheOthersAgainInTheOpenBatch (0.42s)
./cmd/mesh-controller --- PASS: TestAStopNamesWhatStaysOnTheMachinesAndWhatStillCarriesIt (0.43s)
./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeLeavesItOutOfABatch (0.44s)
./cmd/mesh-controller --- PASS: TestSavingPlansAndMovingMergesIsOneAct (0.34s)
./cmd/mesh-controller --- PASS: TestAPlanFollowedFromTheStoreAnswersWhenItMoves (2.03s)
./cmd/mesh-controller --- PASS: TestNodeShowAndStatusReadTheLastSendFromTheStore (0.36s)
./cmd/mesh-controller --- PASS: TestTheConditionsVerbReadsTheLooksTheBucketNoLongerHolds (0.25s)
./cmd/mesh-controller --- PASS: TestAWalkLetGoAndStoppedByVerbsIsSaidStartedAndEnded (0.36s)
./cmd/mesh-controller --- PASS: TestAWalkStoppedOrClosedByAPersonIsSaidEndedStopped (0.35s)
./cmd/mesh-controller --- PASS: TestAWalkRetriedByAPersonIsSaidStartedAgain (0.28s)
./cmd/mesh-controller --- PASS: TestABacklogReleasedByAPersonIsSaidStarted (0.32s)
./cmd/mesh-controller --- PASS: TestAWalkEndedByCancelOrClearIsSaidEnded (0.35s)
./cmd/mesh-controller --- PASS: TestAWalkRestartedByARebuildIsSaidStarted (0.32s)
./cmd/mesh-controller --- PASS: TestAWalkStoppedByHandAndRetriedEndsFailedWhenItFailsAgain (0.39s)
./cmd/mesh-controller --- PASS: TestReplay237 (0.23s)
./cmd/mesh-controller --- PASS: TestAnUnassignThatLeavesItsNodeUnresolvedSaysSoOnceInItsAnswer (0.28s)
./cmd/mesh-controller --- PASS: TestAnUnassignThatLeavesItsNodeResolvedSaysNothingOfIt (0.27s)
./cmd/mesh-controller --- PASS: TestAnAssignThatLeavesItsNodeUnresolvedSaysOnlyThePlansRefusal (0.41s)
./cmd/mesh-controller --- PASS: TestADirectoryOwnersKeyIsRefusedThroughAVerb (0.35s)
./cmd/mesh-controller --- PASS: TestTheSendMakesNoValueForAnOutsideSecretNobodyGave (0.44s)
./cmd/mesh-controller --- PASS: TestAQuestionComposesWithoutAnOutsideSecretNobodyGave (0.32s)
./cmd/mesh-controller --- PASS: TestReplay201 (0.38s)
./cmd/mesh-controller --- PASS: TestARollbackWhoseSendWasRefusedIsCompletedByTheNextSend (0.36s)
./cmd/mesh-controller --- PASS: TestAGateJudgesTheOtherMovesBesideAKeptCore (0.44s)
./cmd/mesh-controller --- PASS: TestReplay401 (0.30s)
./cmd/mesh-controller --- PASS: TestReplay201ThePlansSend (0.28s)
./cmd/mesh-controller --- PASS: TestPlanAndNodeListAnOptionalRequirementLeftUnbound (0.49s)
./cmd/mesh-controller --- PASS: TestReplay340 (0.32s)
./cmd/mesh-controller --- PASS: TestOnlyATrustedFilesNamedKeyIsRefusedThroughAVerb (0.29s)
./cmd/mesh-controller --- PASS: TestReplay349 (0.21s)
./cmd/mesh-controller --- PASS: TestReplay348AFaultFromBeforeTheSendFailsNoGate (0.20s)
./cmd/mesh-controller --- PASS: TestReplay239AModuleNameIsNotTakenOverByAnotherRepository (0.21s)
./cmd/mesh-controller --- PASS: TestAWalkThatMovedNothingSaysWhichModulesMatchedWhatRuns (0.42s)
./cmd/mesh-controller --- PASS: TestAWalkWhoseEveryBuildCameOutTheSameIsDone (0.27s)
./cmd/mesh-controller --- PASS: TestReplay614ANewSDKPlansTheToolchainAndThenItsBundles (0.09s)
./cmd/mesh-controller --- PASS: TestOneAcceptForAProviderIsPlacedForEveryConsumer (0.71s)
./cmd/mesh-controller --- PASS: TestReplay164 (0.33s)
./cmd/mesh-controller --- PASS: TestAnApprovedLayerOpensTheWalkThatSendsIt (0.31s)
./cmd/mesh-controller --- PASS: TestASettingsWalkSendsOneMachineAtATimeEachJudged (0.29s)
./cmd/mesh-controller --- PASS: TestAFailedSettingsWalkStopsAndHoldsNothingBack (0.30s)
./cmd/mesh-controller --- PASS: TestASettingsWalkSendsTheLayerAloneEveryBuildKept (0.29s)
./cmd/mesh-controller --- PASS: TestASettingsWalkStopsBeforeADataMoveAndPassesOverAMachineAway (0.91s)
./cmd/mesh-controller --- PASS: TestACrossingSendSupersedesASettingsGate (0.35s)
./cmd/mesh-controller --- PASS: TestASettingsWalkFailsOnARefusalThatCannotClear (0.28s)
./cmd/mesh-controller --- PASS: TestAProviderElsewhereServesItsOwnComposedName (0.50s)
./cmd/mesh-controller --- PASS: TestAReusedCheckBuildIsRegisteredByItsDigestAndGatedAsABuiltOne (0.84s)
./cmd/mesh-controller --- PASS: TestAReleaseSendsTheRestAtOnceAfterTheFirstPasses (0.37s)
./cmd/mesh-controller --- PASS: TestARestMachineThatFailsIsPutBackAloneAndTheOthersAreJudgedOn (0.49s)
./cmd/mesh-controller --- PASS: TestAWalkTakesOverTheReadingsOfAGateJudgingTheSameBuildThere (0.35s)
./cmd/mesh-controller --- PASS: TestAFirstSendMadeAndNotKeptIsNotSentAgain (0.47s)
./cmd/mesh-controller --- PASS: TestAReleaseSendKeptAndMadeIsNotMadeAgain (0.30s)
./cmd/mesh-controller --- PASS: TestAFirstMachineThatFailsStillStopsTheWalk (0.46s)
./cmd/mesh-controller --- PASS: TestTheControlNodeIsSentLastInAStep (0.53s)
./cmd/mesh-controller --- PASS: TestARestMachineSilentPastItsBoundIsLeftAndSaid (0.41s)
./cmd/mesh-controller --- PASS: TestANoMoveTierWaitsForNoNewReport (0.41s)
./cmd/mesh-controller --- PASS: TestOneProviderDownAndThreeConsumersFailingAreOneCondition (0.19s)
./cmd/mesh-controller --- PASS: TestAConsumerFailingBesideAHealthyProviderIsItsOwn (0.18s)
./internal/inventory --- PASS: TestTheLastSendSaysWhatTheMachineAnswered (0.15s)
./internal/inventory --- PASS: TestAReportIsTheLastSendsAnswerOnlyWhenItIsAboutThatSend (0.14s)
./internal/inventory --- PASS: TestAnIssuedValueIsSealedToEveryHolderOnceAndNotAgain (0.21s)
./internal/inventory --- PASS: TestAnIssuedValueIsSealedAgainAfterAKeyChangeOrAnAcceptance (0.15s)
./internal/inventory --- PASS: TestAConditionsLooksAreKeptBesideTheBucket (0.10s)
./internal/inventory --- PASS: TestAPlanIdHoldingAQuoteIsReadAsAPlainId (0.18s)
./internal/inventory --- PASS: TestAWalksStartIsKeptAndARefusedSaveLeavesItUnsaid (0.11s)
./internal/inventory --- PASS: TestAWalksRestIsReadFromEachMachinesOwnSend (0.14s)
./internal/inventory --- PASS: TestAStoredBuildWithASilentMergeableFileIsStillReadAndComposed (0.14s)
./internal/inventory --- PASS: TestACredentialIssuedOutsideIsNeverMade (0.12s)
./internal/inventory --- PASS: TestOneAcceptForAProviderIsSealedToEveryConsumer (0.10s)
./internal/inventory --- PASS: TestASharedOwnSecretIssuedOutsideIsNeverMade (0.14s)
./internal/inventory --- PASS: TestAReportOfABusyContainerIsKeptAndReadBack (0.74s)
./internal/inventory --- PASS: TestWhatRunsIsTheRegisteredBuildNotANewerOnePutBack (0.13s)
```
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Fixes hq issue 754, seen on 2026-10-14 at 23:37: a
rebuild route-proxylanded while mesh-catalog's rollout plan waited for mesh-delivery's word, and was recorded as the plan's build. When the plan was let go,advanceOnceasked a tier only if every module in it was unasked, so build-agent and gitea were never asked and the plan sat silently until it was stopped by hand.takesOutcome: a plan takes no build outcome while it waits for its word, nor for a module it never asked (no build id and no ask time);planBuiltSayingmakes no module state for an outcome it did not wait for. This is the root fix.advanceOnceasks whateverunaskedOfreturns, not only an all-unasked tier;askTiertakes the names. A module readbuiltwith no build id and no ask time (the shape only the bug made) is asked again, so a hand rebuild is never shipped as the plan's own build (ADR 0219).joinAPlanno longer joins a waiting plan;rebuildsays it builds beside the plan and why.plan.<id>.stalled.Tests: walk_wait_rebuild_754_test.go (the live shape from the store fails on main, passes here); a fixture in queue_test.go held an impossible state (built with no ask) and now records its ask. gofmt, go vet, merge-check.sh with the store tests pass.
Reviewed independently before push: APPROVE at
9f072c110c(the reviewer traced every writer of a module's built state).Delivery
novox/mesh-controller@9f072c110c14— delivered since 2026-10-14T22:08:43ZDelivery plan — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step
Machines
Transitions
The commit's note under
refs/notes/mesh-plankeeps every transition:git log --notes=mesh-plan.ready at
9f072c110c(the operator's word, 2026-10-15; independent review APPROVE at this sha).Merge check at
9f072c11Judged: head
9f072c110c14merged into trunk60cc9ec363df; read beside it: mesh-catalog7913b56d66f7, mesh-controller-main60cc9ec363df, mesh-host1a2677882380, mesh-tools5d70eb3e35a9mesh/merge-gate: PASS — every machine composes with the change as it did without (4 of 4 compose) (modules: build-agent, mesh-controller)mesh/repo-check: PASS — its merge-check.sh passedDelivery plan — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step
Run by the build seat on shanks as
build-1792015412269714001(builds --log build-1792015412269714001).