Issue 913: marking a reviewed pull request ready was two raw forge calls whose order the forge module rejects when reversed, and which the session's permission check refuses as self-approval; the operator merged three approved hq changes by hand.
This declares mark-ready (id, reviewed-by, why) on the delivery seat, optional until mesh-delivery serves it, so either may deliver first. Group feat/913-mark-ready with mesh-catalog (mesh-delivery serves it) and hq (playbooks 07 and 08 name it).
Independent review: approved (2 rounds, larger model). Unit tests: go test ./internal/catalogue/ green.
Issue 913: marking a reviewed pull request ready was two raw forge calls whose order the forge module rejects when reversed, and which the session's permission check refuses as self-approval; the operator merged three approved hq changes by hand.
This declares `mark-ready` (id, reviewed-by, why) on the delivery seat, optional until mesh-delivery serves it, so either may deliver first. Group `feat/913-mark-ready` with mesh-catalog (mesh-delivery serves it) and hq (playbooks 07 and 08 name it).
Independent review: approved (2 rounds, larger model). Unit tests: `go test ./internal/catalogue/` green.
Deliverynovox/mesh-controller@114c99e02a52 — delivered since 2026-10-16T14:04:16Z
Delivery plan — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step
tier 0: mesh-controller
tier 1: build-agent
ace: receives build-agent
g14: receives build-agent
novox: receives mesh-controller, build-agent
shanks: receives build-agent
build-agent keeps data (ADR 0233): what it holds is backed up before it moves
grants step: if this changes what the bus's user list says (a new tool, subject or user), novox is sent that list alone, every build there kept, before build-agent is judged on its first machine
composed together: pass — every machine composes with the change as it did without (3 of 4 compose)
Machines
mesh-controller on every machine running it: sent
build-agent on every machine running it: sent
Transitions
2026-10-16 12:37 (new) → proposed (announced): novox/mesh-controller#357's head announced
2026-10-16 12:42 proposed → checked (checked): a verdict names this commit and the trunk's head as its trunk commit
2026-10-16 12:42 checked → rejected (refused): the gate failed or could not run, or the repository's own check failed
2026-10-16 13:09 rejected → proposed (recheck): its repo-check failed only on issue 914 (main broken by the catalogue's feature 57 release); the fix merged as 611e2275
2026-10-16 13:16 proposed → checked (checked): a verdict names this commit and the trunk's head as its trunk commit
2026-10-16 13:16 checked → ready (accepted): the gate passed or warned, and the repository's own check did not fail
2026-10-16 13:57 ready → held (hold): something holds it for a person: its group's composed check did not pass for the heads that merged, or it merged and no walk was opened for it
2026-10-16 13:58 held → delivering (release): the operator merged the mark-ready group at 15:47 to deliver it; the controller dropped the merge at 15:49:31 ('could not act on it: another controller is working the plans') while the issue-914 delivery held the plans, so no walk answers it
2026-10-16 14:04 delivering → delivered (done): its walk is done, carrying its own commit: every machine of its deploy plan passed, or was left as its policy says
The commit's note under refs/notes/mesh-plan keeps every transition: git log --notes=mesh-plan.
<!-- mesh-delivery:view -->
**Delivery** `novox/mesh-controller@114c99e02a52` — **delivered** since 2026-10-16T14:04:16Z
**Delivery plan** — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step
- tier 0: mesh-controller
- tier 1: build-agent
- ace: receives build-agent
- g14: receives build-agent
- novox: receives mesh-controller, build-agent
- shanks: receives build-agent
- build-agent keeps data (ADR 0233): what it holds is backed up before it moves
- grants step: if this changes what the bus's user list says (a new tool, subject or user), novox is sent that list alone, every build there kept, before build-agent is judged on its first machine
**Group** `feat/913-mark-ready`, in order: novox/hq@7b5f3582be90 → novox/mesh-controller@114c99e02a52 → novox/mesh-catalog@2d1b20364f9b
- novox/mesh-controller@114c99e02a52 before novox/mesh-catalog@2d1b20364f9b: built by
- composed together: pass — every machine composes with the change as it did without (3 of 4 compose)
**Machines**
- mesh-controller on every machine running it: sent
- build-agent on every machine running it: sent
**Transitions**
- 2026-10-16 12:37 (new) → proposed (announced): novox/mesh-controller#357's head announced
- 2026-10-16 12:42 proposed → checked (checked): a verdict names this commit and the trunk's head as its trunk commit
- 2026-10-16 12:42 checked → rejected (refused): the gate failed or could not run, or the repository's own check failed
- 2026-10-16 13:09 rejected → proposed (recheck): its repo-check failed only on issue 914 (main broken by the catalogue's feature 57 release); the fix merged as 611e2275
- 2026-10-16 13:16 proposed → checked (checked): a verdict names this commit and the trunk's head as its trunk commit
- 2026-10-16 13:16 checked → ready (accepted): the gate passed or warned, and the repository's own check did not fail
- 2026-10-16 13:57 ready → held (hold): something holds it for a person: its group's composed check did not pass for the heads that merged, or it merged and no walk was opened for it
- 2026-10-16 13:58 held → delivering (release): the operator merged the mark-ready group at 15:47 to deliver it; the controller dropped the merge at 15:49:31 ('could not act on it: another controller is working the plans') while the issue-914 delivery held the plans, so no walk answers it
- 2026-10-16 14:04 delivering → delivered (done): its walk is done, carrying its own commit: every machine of its deploy plan passed, or was left as its policy says
The commit's note under `refs/notes/mesh-plan` keeps every transition: `git log --notes=mesh-plan`.
mesh/merge-gate: PASS — every machine composes with the change as it did without (4 of 4 compose) (modules: build-agent, mesh-controller)
mesh/repo-check: FAIL — its merge-check.sh failed: --- FAIL: TestEveryCatalogueManifestParses (1.95s); and TestNoCatalogueManifestNamesAnInstallation, TestEveryCatalogueIdentityFitsWhatItRequires, TestCaTrustRendersTheAuthorityItWasBoundTo, TestTheFilterModuleNeverFlushesTheRuleset, TestTheForgesOwnAddressFollowsThePortTheNodeGaveIt and 6 more
Delivery plan — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step
tier 0: mesh-controller
tier 1: build-agent
ace: receives build-agent
g14: receives build-agent
novox: receives mesh-controller, build-agent
shanks: receives build-agent
build-agent keeps data (ADR 0233): what it holds is backed up before it moves
grants step: if this changes what the bus's user list says (a new tool, subject or user), novox is sent that list alone, every build there kept, before build-agent is judged on its first machine
read by no module's build: internal/catalogue/delivery_seat_test.go
Run by the build seat on ace as build-1792154227519080730 (builds --log build-1792154227519080730).
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is left out of the rest of the mesh: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is left out of the rest of the mesh: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is left out of the rest of the mesh: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
mailer on the whole mesh:
+ tags.todo.name
run `push --behind` to send it to the machines running it
plan-tier: tier 0 built; sent 2 module(s) to anchor first in one send (node-tools, app1), the rest once its gate passes
plan-tier: node-tools passed its gate on anchor (healthy 1 times over 0s, by the tool runner's rule: one reading once it answers, after the node-engine's witness window (novox/hq ADR 0351)); the rest are sent
plan-tier: tier 0 built; sent node-tools, app1 to laptop, one send each
plan-tier: done — novox/mesh-catalog at c2, 1 tier(s)
requests on laptop now holds "tv-api" from anchor, sealed to both machines.
the mesh cannot read it back, will not replace it with one of its own, and will not rotate it
run `push anchor` and `push laptop` to send it
the vault now holds accept/<nil> (generation 1), accepted: sealed at this terminal to the vault's key for this call, opened in the vault alone and never remade by it; its machine takes it from the vault
build-1792154474778506149: could not build https://forge.example/novox/a.git:
cancelled by hand
plan-308-cancel: a failed to build in tier 0; the tiers after it are not asked
cancelled build-1792154474778506149 (https://forge.example/novox/a.git, waiting): deleted from the node-build-agent queue and recorded failed, cancelled by hand — a plan that asked for it fails with that
took the controller lease at epoch 1 (controller@Ace pid 18139 since 2026-10-16T12:39:57Z)
build-1792154474856975830: could not build https://forge.example/novox/a.git:
cancelled by hand
plan-308-clear: a failed to build in tier 0; the tiers after it are not asked
cancelled build-1792154474856975830 (https://forge.example/novox/a.git, waiting): deleted from the node-build-agent queue and recorded failed, cancelled by hand — a plan that asked for it fails with that
1 waiting ask(s) cancelled
gave the controller lease back (epoch 1)
FAIL
FAIL github.com/novox/mesh-controller/cmd/mesh-controller 78s (shard 7 of 8: 128 tests)
ok github.com/novox/mesh-controller/cmd/mesh-controller 65s (shard 8 of 8: 128 tests)
ok github.com/novox/mesh-controller/internal/inventory 14s (shard 1 of 4: 77 tests)
ok github.com/novox/mesh-controller/internal/inventory 15s (shard 2 of 4: 77 tests)
ok github.com/novox/mesh-controller/internal/inventory 13s (shard 3 of 4: 77 tests)
ok github.com/novox/mesh-controller/internal/inventory 14s (shard 4 of 4: 77 tests)
ok github.com/novox/mesh-controller/internal/builder 15s (shard 1 of 4: 55 tests)
ok github.com/novox/mesh-controller/internal/builder 17s (shard 2 of 4: 55 tests)
ok github.com/novox/mesh-controller/internal/builder 36s (shard 3 of 4: 55 tests)
ok github.com/novox/mesh-controller/internal/builder 37s (shard 4 of 4: 55 tests)
ok github.com/novox/mesh-controller/internal/link 13s (shard 1 of 4: 48 tests)
ok github.com/novox/mesh-controller/internal/link 18s (shard 2 of 4: 48 tests)
ok github.com/novox/mesh-controller/internal/link 15s (shard 3 of 4: 47 tests)
ok github.com/novox/mesh-controller/internal/link 19s (shard 4 of 4: 47 tests)
store tests, each run against the store:
./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeWalksTheOthersAgain (0.32s)
./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeEndsTheMergesThatContainIt (0.28s)
./cmd/mesh-controller --- PASS: TestAStopWalksTheOthersAgainInTheOpenBatch (0.38s)
./cmd/mesh-controller --- PASS: TestAStopNamesWhatStaysOnTheMachinesAndWhatStillCarriesIt (0.27s)
./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeLeavesItOutOfABatch (0.34s)
./cmd/mesh-controller --- PASS: TestSavingPlansAndMovingMergesIsOneAct (0.25s)
./cmd/mesh-controller --- PASS: TestAPlanFollowedFromTheStoreAnswersWhenItMoves (2.02s)
./cmd/mesh-controller --- PASS: TestNodeShowAndStatusReadTheLastSendFromTheStore (0.30s)
./cmd/mesh-controller --- PASS: TestTheConditionsVerbReadsTheLooksTheBucketNoLongerHolds (0.13s)
./cmd/mesh-controller --- PASS: TestAWalkLetGoAndStoppedByVerbsIsSaidStartedAndEnded (0.26s)
./cmd/mesh-controller --- PASS: TestAWalkStoppedOrClosedByAPersonIsSaidEndedStopped (0.27s)
./cmd/mesh-controller --- PASS: TestAWalkRetriedByAPersonIsSaidStartedAgain (0.22s)
./cmd/mesh-controller --- PASS: TestABacklogReleasedByAPersonIsSaidStarted (0.21s)
./cmd/mesh-controller --- PASS: TestAWalkEndedByCancelOrClearIsSaidEnded (0.27s)
./cmd/mesh-controller --- PASS: TestAWalkRestartedByARebuildIsSaidStarted (0.21s)
./cmd/mesh-controller --- PASS: TestAWalkStoppedByHandAndRetriedEndsFailedWhenItFailsAgain (0.27s)
./cmd/mesh-controller --- PASS: TestReplay237 (0.25s)
./cmd/mesh-controller --- PASS: TestAnUnassignThatLeavesItsNodeUnresolvedSaysSoOnceInItsAnswer (0.26s)
./cmd/mesh-controller --- PASS: TestAnUnassignThatLeavesItsNodeResolvedSaysNothingOfIt (0.47s)
./cmd/mesh-controller --- PASS: TestAnAssignThatLeavesItsNodeUnresolvedSaysOnlyThePlansRefusal (0.45s)
./cmd/mesh-controller --- PASS: TestADirectoryOwnersKeyIsRefusedThroughAVerb (0.25s)
./cmd/mesh-controller --- PASS: TestTheSendMakesNoValueForAnOutsideSecretNobodyGave (0.39s)
./cmd/mesh-controller --- PASS: TestAQuestionComposesWithoutAnOutsideSecretNobodyGave (0.39s)
./cmd/mesh-controller --- PASS: TestReplay201 (0.29s)
./cmd/mesh-controller --- PASS: TestARollbackWhoseSendWasRefusedIsCompletedByTheNextSend (0.20s)
./cmd/mesh-controller --- PASS: TestAGateJudgesTheOtherMovesBesideAKeptCore (0.20s)
./cmd/mesh-controller --- PASS: TestReplay401 (0.34s)
./cmd/mesh-controller --- PASS: TestReplay201ThePlansSend (0.30s)
./cmd/mesh-controller --- PASS: TestPlanAndNodeListAnOptionalRequirementLeftUnbound (0.32s)
./cmd/mesh-controller --- PASS: TestReplay340 (0.31s)
./cmd/mesh-controller --- PASS: TestOnlyATrustedFilesNamedKeyIsRefusedThroughAVerb (0.21s)
./cmd/mesh-controller --- PASS: TestReplay349 (0.25s)
./cmd/mesh-controller --- PASS: TestReplay348AFaultFromBeforeTheSendFailsNoGate (0.21s)
./cmd/mesh-controller --- PASS: TestReplay239AModuleNameIsNotTakenOverByAnotherRepository (0.17s)
./cmd/mesh-controller --- PASS: TestAWalkThatMovedNothingSaysWhichModulesMatchedWhatRuns (0.24s)
./cmd/mesh-controller --- PASS: TestAWalkWhoseEveryBuildCameOutTheSameIsDone (0.18s)
./cmd/mesh-controller --- PASS: TestReplay614ANewSDKPlansTheToolchainAndThenItsBundles (0.09s)
./cmd/mesh-controller --- PASS: TestOneAcceptForAProviderIsPlacedForEveryConsumer (0.98s)
./cmd/mesh-controller --- PASS: TestReplay164 (0.33s)
./cmd/mesh-controller --- PASS: TestAnApprovedLayerOpensTheWalkThatSendsIt (0.21s)
./cmd/mesh-controller --- PASS: TestASettingsWalkSendsOneMachineAtATimeEachJudged (0.20s)
./cmd/mesh-controller --- PASS: TestAFailedSettingsWalkStopsAndHoldsNothingBack (0.20s)
./cmd/mesh-controller --- PASS: TestASettingsWalkSendsTheLayerAloneEveryBuildKept (0.21s)
./cmd/mesh-controller --- PASS: TestASettingsWalkStopsBeforeADataMoveAndPassesOverAMachineAway (0.55s)
./cmd/mesh-controller --- PASS: TestACrossingSendSupersedesASettingsGate (0.19s)
./cmd/mesh-controller --- PASS: TestASettingsWalkFailsOnARefusalThatCannotClear (0.17s)
./cmd/mesh-controller --- PASS: TestAProviderElsewhereServesItsOwnComposedName (0.26s)
./cmd/mesh-controller --- PASS: TestAReusedCheckBuildIsRegisteredByItsDigestAndGatedAsABuiltOne (0.40s)
./cmd/mesh-controller --- PASS: TestTheMergeGateJudgesEachManifestAgainstTheListOfTheTree (5.36s)
./cmd/mesh-controller --- PASS: TestRegistrationPublishesTheNewestTrunkListAndJudgesEveryModuleAgainstIt (0.20s)
./cmd/mesh-controller --- PASS: TestADeclarationIsTheSameAfterPlacementMoves (0.42s)
./cmd/mesh-controller --- PASS: TestAReleaseSendsTheRestAtOnceAfterTheFirstPasses (0.27s)
./cmd/mesh-controller --- PASS: TestARestMachineThatFailsIsPutBackAloneAndTheOthersAreJudgedOn (0.23s)
./cmd/mesh-controller --- PASS: TestAWalkTakesOverTheReadingsOfAGateJudgingTheSameBuildThere (0.19s)
./cmd/mesh-controller --- PASS: TestAFirstSendMadeAndNotKeptIsNotSentAgain (0.26s)
./cmd/mesh-controller --- PASS: TestAReleaseSendKeptAndMadeIsNotMadeAgain (0.19s)
./cmd/mesh-controller --- PASS: TestAFirstMachineThatFailsStillStopsTheWalk (0.20s)
./cmd/mesh-controller --- PASS: TestTheControlNodeIsSentLastInAStep (0.24s)
./cmd/mesh-controller --- PASS: TestARestMachineSilentPastItsBoundIsLeftAndSaid (0.24s)
./cmd/mesh-controller --- PASS: TestANoMoveTierWaitsForNoNewReport (0.32s)
./cmd/mesh-controller --- PASS: TestOneProviderDownAndThreeConsumersFailingAreOneCondition (0.19s)
./cmd/mesh-controller --- PASS: TestAConsumerFailingBesideAHealthyProviderIsItsOwn (0.18s)
./cmd/mesh-controller --- PASS: TestTheProvisionerClientsAccountIsIssuedForItsServiceAndNeverInvented (0.21s)
./cmd/mesh-controller --- PASS: TestAcceptOfAnOwnSecretTakesThePathOfItsModulesForm (0.25s)
./cmd/mesh-controller --- PASS: TestAcceptForAProviderTakesThePathOfTheProvidersModule (0.27s)
./cmd/mesh-controller --- PASS: TestAcceptForAMovedTrustedModuleAnnouncesBeforeTheVaultIsAsked (0.27s)
./cmd/mesh-controller --- PASS: TestAcceptForAMovedModuleRecordsAHandActAndNeverTheValue (0.22s)
./cmd/mesh-controller --- PASS: TestAcceptOfAnOutsideOfferTakesThePathOfTheProvidersModule (0.29s)
./cmd/mesh-controller --- PASS: TestAnAskAtTheDeskTakesThePathOfItsModulesForm (0.27s)
./cmd/mesh-controller --- PASS: TestAnIssuedValueTakesThePathOfItsProvidersModule (0.32s)
./cmd/mesh-controller --- PASS: TestARotationTakesThePathOfItsModulesForm (0.24s)
./cmd/mesh-controller --- PASS: TestADeclarationIsTheSameWhileTheWordsAreStillInTheLayers (2.57s)
./cmd/mesh-controller --- PASS: TestADeclarationIsTheSameAfterTheMoveOfPlacement (5.10s)
./cmd/mesh-controller --- PASS: TestTheSendSealsNoSecretOfAModuleHandedThere (0.27s)
./cmd/mesh-controller --- PASS: TestAModulesSecretsAreTheVaultsOnceItIsMarkedMoved (0.19s)
./cmd/mesh-controller --- PASS: TestEveryMachineIsToldTheSameAfterTheMoveOfConfig (24.42s)
./cmd/mesh-controller --- PASS: TestTheMoveOfConfigRefusesWhatWouldChangeAMachine (8.49s)
./cmd/mesh-controller --- PASS: TestTheSettingsVerbForwardsToConfigOnceTheValuesMoved (11.45s)
./cmd/mesh-controller --- PASS: TestTheSendCarriesTheVaultsBoxForACoreCredentialAndKeepsIt (0.39s)
./cmd/mesh-controller --- PASS: TestASilentVaultHoldsTheKeptBoxAndSaysSo (0.40s)
./cmd/mesh-controller --- PASS: TestACoreModuleFirstPlacedWhileTheVaultIsSilentIsSealedByTheController (0.29s)
./cmd/mesh-controller --- PASS: TestAnEngineBelowTheContractIsSentTheControllersSealAsBefore (0.34s)
./cmd/mesh-controller --- PASS: TestModuleIssueHandsACoveredAccountToTheVaultAndOnlyThat (0.31s)
./cmd/mesh-controller --- PASS: TestModuleIssueFailsWhenTheVaultDoesNotTakeACoveredAccount (0.25s)
./cmd/mesh-controller --- PASS: TestModuleIssueBeforeTheVaultIsInstalledKeepsTheValueAndHandsNothing (0.28s)
./cmd/mesh-controller --- PASS: TestARecordedModulesBundleOnlyMoveRollsOutInItsWalk (0.34s)
./cmd/mesh-controller --- PASS: TestARecordedModulesMoveThatRecreatesAContainerWaits (0.75s)
./cmd/mesh-controller --- PASS: TestARecordedModulesMoveThatTouchesDataOrAProviderWaits (0.73s)
./cmd/mesh-controller --- PASS: TestAPersonsRecordAndTheBusHoldEveryMove (0.52s)
./cmd/mesh-controller --- PASS: TestARecordedMoveThatCannotBeJudgedWaits (0.36s)
./cmd/mesh-controller --- PASS: TestReplay867 (3.99s)
./cmd/mesh-controller --- PASS: TestReplay867Recheck (3.81s)
./cmd/mesh-controller --- PASS: TestTheRecheckVerbAsksMeshDeliveryOnABusOfItsOwn (0.35s)
./cmd/mesh-controller --- PASS: TestAGroupsCompositionIntoAReleaseBranchIsJudgedByItsOwnController (3.54s)
./cmd/mesh-controller --- PASS: TestAGroupsCompositionJudgedWithTheValidatorIntoAReleaseBranchIsJudgedByItsOwnController (3.24s)
./internal/inventory --- PASS: TestTheLastSendSaysWhatTheMachineAnswered (0.13s)
./internal/inventory --- PASS: TestAReportIsTheLastSendsAnswerOnlyWhenItIsAboutThatSend (0.16s)
./internal/inventory --- PASS: TestAnIssuedValueIsSealedToEveryHolderOnceAndNotAgain (0.09s)
./internal/inventory --- PASS: TestAnIssuedValueIsSealedAgainAfterAKeyChangeOrAnAcceptance (0.09s)
./internal/inventory --- PASS: TestAConditionsLooksAreKeptBesideTheBucket (0.07s)
./internal/inventory --- PASS: TestAPlanIdHoldingAQuoteIsReadAsAPlainId (0.12s)
./internal/inventory --- PASS: TestAWalksStartIsKeptAndARefusedSaveLeavesItUnsaid (0.13s)
./internal/inventory --- PASS: TestAWalksRestIsReadFromEachMachinesOwnSend (0.12s)
./internal/inventory --- PASS: TestAStoredBuildWithASilentMergeableFileIsStillReadAndComposed (0.11s)
./internal/inventory --- PASS: TestACredentialIssuedOutsideIsNeverMade (0.09s)
./internal/inventory --- PASS: TestOneAcceptForAProviderIsSealedToEveryConsumer (0.08s)
./internal/inventory --- PASS: TestASharedOwnSecretIssuedOutsideIsNeverMade (0.08s)
./internal/inventory --- PASS: TestAModuleInTheConfigFormIsMirroredWithItsWholeDeclaration (0.12s)
./internal/inventory --- PASS: TestAReportOfABusyContainerIsKeptAndReadBack (0.08s)
./internal/inventory --- PASS: TestANewerBuildsListReplacesTheKeptOneAndAnOlderOneHeardLaterDoesNot (0.13s)
./internal/inventory --- PASS: TestPlacementMovesOutOfTheSettingsLayers (0.38s)
./internal/inventory --- PASS: TestASettingRoutesPlacementBesideTheLayer (0.14s)
./internal/inventory --- PASS: TestTheProvisionerClientsMachineHasAnAccountOfItsOwn (0.10s)
./internal/inventory --- PASS: TestTheFourWordsAreKeptBesideTheLayer (0.14s)
./internal/inventory --- PASS: TestALayerStillHoldingTheWordsReadsThemAsPlacement (0.13s)
./internal/inventory --- PASS: TestTheMoveOfPlacementMovesWhatTheLayersStillHold (0.12s)
./internal/inventory --- PASS: TestTheMoveReadsEveryRowSealedToAMachineAsItIs (0.14s)
./internal/inventory --- PASS: TestASendKeepsThePlansItHandedAndTheMirrorCarriesThem (0.16s)
./internal/inventory --- PASS: TestTheLayersAreReadUntilTheMoveOfConfigHasRun (0.09s)
./internal/inventory --- PASS: TestAModuleReadsMeshConfigOnlyWhereItsValuesAre (0.10s)
./internal/inventory --- PASS: TestTheEndOfTheMoveRefusesALayerChangedSinceItWasRead (0.09s)
./internal/inventory --- PASS: TestACoreCredentialsVaultBoxIsKeptPerMachineAndReplaced (0.07s)
./internal/inventory --- PASS: TestWhatRunsIsTheRegisteredBuildNotANewerOnePutBack (0.14s)
./internal/recordmirror --- PASS: TestNatsAnAssignmentAndARegistrationEachChangeOneKeyAndRaiseOneEvent (3.58s)
./internal/recordmirror --- PASS: TestNatsTheListOfPredefinedKeysKeptChangesTheMirrorsOneKey (1.49s)
the suite failed: each package or shard that failed is said above with its output
--- what failed, picked from the whole of its output (the whole is in the build's log)
--- FAIL: TestEveryCatalogueManifestParses (1.95s)
catalogue_check_test.go:26: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
catalogue_check_test.go:39: claude-code: this manifest cannot be used:
- claude-code's config value "managed_settings": falls back to the predefined key "agent-managed-settings", and the list of predefined keys (predefined.json at the root of the catalogue's repository) is not present where it is judged: a value falls back only to a key on that list; judge it in the catalogue, or leave "predefined" out (novox/hq ADR 0348 §7)
catalogue_check_test.go:39: dunst: this manifest cannot be used:
- dunst's config value "font-size": falls back to the predefined key "font-size", and the list of predefined keys (predefined.json at the root of the catalogue's repository) is not present where it is judged: a value falls back only to a key on that list; judge it in the catalogue, or leave "predefined" out (novox/hq ADR 0348 §7)
catalogue_check_test.go:52: 133 manifests, 71 named endpoints, 29 routed endpoints resolved
--- FAIL: TestNoCatalogueManifestNamesAnInstallation (2.26s)
catalogue_check_test.go:62: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
catalogue_check_test.go:75: /var/lib/build-agent/workspace/check/mesh-catalog/modules/claude-code/module.json: this manifest cannot be used:
- claude-code's config value "managed_settings": falls back to the predefined key "agent-managed-settings", and the list of predefined keys (predefined.json at the root of the catalogue's repository) is not present where it is judged: a value falls back only to a key on that list; judge it in the catalogue, or leave "predefined" out (novox/hq ADR 0348 §7)
catalogue_check_test.go:75: /var/lib/build-agent/workspace/check/mesh-catalog/modules/dunst/module.json: this manifest cannot be used:
- dunst's config value "font-size": falls back to the predefined key "font-size", and the list of predefined keys (predefined.json at the root of the catalogue's repository) is not present where it is judged: a value falls back only to a key on that list; judge it in the catalogue, or leave "predefined" out (novox/hq ADR 0348 §7)
--- FAIL: TestEveryCatalogueIdentityFitsWhatItRequires (0.07s)
catalogue_check_test.go:124: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
catalogue_check_test.go:137: /var/lib/build-agent/workspace/check/mesh-catalog/modules/claude-code/module.json: this manifest cannot be used:
- claude-code's config value "managed_settings": falls back to the predefined key "agent-managed-settings", and the list of predefined keys (predefined.json at the root of the catalogue's repository) is not present where it is judged: a value falls back only to a key on that list; judge it in the catalogue, or leave "predefined" out (novox/hq ADR 0348 §7)
--- FAIL: TestCaTrustRendersTheAuthorityItWasBoundTo (0.01s)
catrust_manifest_test.go:22: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
catrust_manifest_test.go:52: the script does not fetch from the authority it was bound to:
catrust_manifest_test.go:71: the unit does not say "ExecStart=/var/lib/ca-trust/anchor install":
catrust_manifest_test.go:71: the unit does not say "ExecStop=/var/lib/ca-trust/anchor remove":
catrust_manifest_test.go:71: the unit does not say "RemainAfterExit=yes":
--- FAIL: TestTheFilterModuleNeverFlushesTheRuleset (0.00s)
foundation_manifests_test.go:45: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
foundation_manifests_test.go:70: the unit does not load the computed rule set and delete only its own table:
--- FAIL: TestTheForgesOwnAddressFollowsThePortTheNodeGaveIt (0.04s)
foundation_manifests_test.go:189: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
foundation_manifests_test.go:189: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
foundation_manifests_test.go:191: the forge's manifest does not resolve against its own build: gitea names templates, and the build carried no text read back from the archive it packs files/ into ("files"): the builder that built it does not read templates
--- FAIL: TestTheForgesSshPortIsTheMeshsFixedConventionByDefault (0.04s)
foundation_manifests_test.go:278: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
foundation_manifests_test.go:288: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
foundation_manifests_test.go:288: the forge's manifest does not resolve against its own build: gitea names templates, and the build carried no text read back from the archive it packs files/ into ("files"): the builder that built it does not read templates
--- FAIL: TestANodeMayGiveTheForgesSshPortADifferentNumber (0.04s)
foundation_manifests_test.go:299: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
foundation_manifests_test.go:308: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
foundation_manifests_test.go:308: the forge's manifest does not resolve against its own build: gitea names templates, and the build carried no text read back from the archive it packs files/ into ("files"): the builder that built it does not read templates
--- FAIL: TestTheRuntimesModuleTrustsTheMeshsRegistry (0.02s)
generated_collision_test.go:60: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
generated_collision_test.go:75: the runtime's file says ""
--- FAIL: TestGenesisAssignsTheBuildAgentWithNothingProvidingTheRegistry (0.01s)
genesis_registry_test.go:26: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
genesis_registry_test.go:26: the build agent does not resolve against its own build: build-agent says it builds files and the build did not produce it — the build did not do what the manifest asked, which is a different fault from a resource asking for the wrong thing
--- FAIL: TestTheMachinesNameIsItsSetting (0.00s)
hostname_seat_test.go:59: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
panic: interface conversion: interface {} is nil, not string [recovered, repanicked]
goroutine 398 [running]:
testing.tRunner.func1.2({0xdeea40, 0xc000412750})
/usr/local/go/src/testing/testing.go:1974 +0x419
testing.tRunner.func1()
/usr/local/go/src/testing/testing.go:1977 +0x67f
panic({0xdeea40?, 0xc000412750?})
/usr/local/go/src/runtime/panic.go:860 +0x13a
github.com/novox/mesh-controller/internal/catalogue.TestTheMachinesNameIsItsSetting.func1(0x0)
/var/lib/build-agent/workspace/check/mesh-controller/internal/catalogue/hostname_seat_test.go:77 +0x6b0
github.com/novox/mesh-controller/internal/catalogue.TestTheMachinesNameIsItsSetting(0xc00022b208)
/var/lib/build-agent/workspace/check/mesh-controller/internal/catalogue/hostname_seat_test.go:84 +0x609
testing.tRunner(0xc00022b208, 0xedf028)
/usr/local/go/src/testing/testing.go:2036 +0x21d
created by testing.(*T).Run in goroutine 1
/usr/local/go/src/testing/testing.go:2101 +0xb13
FAIL github.com/novox/mesh-controller/internal/catalogue 7.319s
--- FAIL: TestTheResolverIsToldEveryMachineOnTheNetworkAndToldAgainWhenOneLeaves (0.26s)
network_test.go:265: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
network_test.go:265: dnsmasq is not registered: dnsmasq still names the template(s) of config (files/dnsmasq.conf), wait-for-address (files/mesh.conf): the manifest the mesh holds carries each file's text, read back from the build's templates archive — this one was resolved by a builder that does not read templates, or not built at all (novox/hq ADR 0349 §2)
FAIL github.com/novox/mesh-controller/cmd/mesh-controller 78s (shard 7 of 8: 128 tests)
**Merge check** at `114c99e0`
Judged: head `114c99e02a52` merged into trunk `a20680dfe769`; read beside it: mesh-catalog `8b44967e098e`, mesh-controller-main `a20680dfe769`, mesh-host `cd13f7726ef0`, mesh-tools `6b3e15042fee`
Siblings read beside it: novox/mesh-catalog#331 `2d1b20364f9b` merged onto `3db85a0dde83` (main)
- `mesh/merge-gate`: **PASS** — every machine composes with the change as it did without (4 of 4 compose) (modules: build-agent, mesh-controller)
- `mesh/repo-check`: **FAIL** — its merge-check.sh failed: --- FAIL: TestEveryCatalogueManifestParses (1.95s); and TestNoCatalogueManifestNamesAnInstallation, TestEveryCatalogueIdentityFitsWhatItRequires, TestCaTrustRendersTheAuthorityItWasBoundTo, TestTheFilterModuleNeverFlushesTheRuleset, TestTheForgesOwnAddressFollowsThePortTheNodeGaveIt and 6 more
**Delivery plan** — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step
- tier 0: mesh-controller
- tier 1: build-agent
- ace: receives build-agent
- g14: receives build-agent
- novox: receives mesh-controller, build-agent
- shanks: receives build-agent
- build-agent keeps data (ADR 0233): what it holds is backed up before it moves
- grants step: if this changes what the bus's user list says (a new tool, subject or user), novox is sent that list alone, every build there kept, before build-agent is judged on its first machine
- read by no module's build: internal/catalogue/delivery_seat_test.go
Run by the build seat on ace as `build-1792154227519080730` (`builds --log build-1792154227519080730`).
```
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is left out of the rest of the mesh: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is left out of the rest of the mesh: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is left out of the rest of the mesh: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
anchor is not counted as on the network: it does not resolve: these assignments cannot be applied:
- rival-one and rival-two both claim "the-seat", and only one thing may hold it per node
mailer on the whole mesh:
+ tags.todo.name
run `push --behind` to send it to the machines running it
plan-tier: tier 0 built; sent 2 module(s) to anchor first in one send (node-tools, app1), the rest once its gate passes
plan-tier: node-tools passed its gate on anchor (healthy 1 times over 0s, by the tool runner's rule: one reading once it answers, after the node-engine's witness window (novox/hq ADR 0351)); the rest are sent
plan-tier: tier 0 built; sent node-tools, app1 to laptop, one send each
plan-tier: done — novox/mesh-catalog at c2, 1 tier(s)
requests on laptop now holds "tv-api" from anchor, sealed to both machines.
the mesh cannot read it back, will not replace it with one of its own, and will not rotate it
run `push anchor` and `push laptop` to send it
the vault now holds accept/<nil> (generation 1), accepted: sealed at this terminal to the vault's key for this call, opened in the vault alone and never remade by it; its machine takes it from the vault
build-1792154474778506149: could not build https://forge.example/novox/a.git:
cancelled by hand
plan-308-cancel: a failed to build in tier 0; the tiers after it are not asked
cancelled build-1792154474778506149 (https://forge.example/novox/a.git, waiting): deleted from the node-build-agent queue and recorded failed, cancelled by hand — a plan that asked for it fails with that
took the controller lease at epoch 1 (controller@Ace pid 18139 since 2026-10-16T12:39:57Z)
build-1792154474856975830: could not build https://forge.example/novox/a.git:
cancelled by hand
plan-308-clear: a failed to build in tier 0; the tiers after it are not asked
cancelled build-1792154474856975830 (https://forge.example/novox/a.git, waiting): deleted from the node-build-agent queue and recorded failed, cancelled by hand — a plan that asked for it fails with that
1 waiting ask(s) cancelled
gave the controller lease back (epoch 1)
FAIL
FAIL github.com/novox/mesh-controller/cmd/mesh-controller 78s (shard 7 of 8: 128 tests)
ok github.com/novox/mesh-controller/cmd/mesh-controller 65s (shard 8 of 8: 128 tests)
ok github.com/novox/mesh-controller/internal/inventory 14s (shard 1 of 4: 77 tests)
ok github.com/novox/mesh-controller/internal/inventory 15s (shard 2 of 4: 77 tests)
ok github.com/novox/mesh-controller/internal/inventory 13s (shard 3 of 4: 77 tests)
ok github.com/novox/mesh-controller/internal/inventory 14s (shard 4 of 4: 77 tests)
ok github.com/novox/mesh-controller/internal/builder 15s (shard 1 of 4: 55 tests)
ok github.com/novox/mesh-controller/internal/builder 17s (shard 2 of 4: 55 tests)
ok github.com/novox/mesh-controller/internal/builder 36s (shard 3 of 4: 55 tests)
ok github.com/novox/mesh-controller/internal/builder 37s (shard 4 of 4: 55 tests)
ok github.com/novox/mesh-controller/internal/link 13s (shard 1 of 4: 48 tests)
ok github.com/novox/mesh-controller/internal/link 18s (shard 2 of 4: 48 tests)
ok github.com/novox/mesh-controller/internal/link 15s (shard 3 of 4: 47 tests)
ok github.com/novox/mesh-controller/internal/link 19s (shard 4 of 4: 47 tests)
store tests, each run against the store:
./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeWalksTheOthersAgain (0.32s)
./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeEndsTheMergesThatContainIt (0.28s)
./cmd/mesh-controller --- PASS: TestAStopWalksTheOthersAgainInTheOpenBatch (0.38s)
./cmd/mesh-controller --- PASS: TestAStopNamesWhatStaysOnTheMachinesAndWhatStillCarriesIt (0.27s)
./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeLeavesItOutOfABatch (0.34s)
./cmd/mesh-controller --- PASS: TestSavingPlansAndMovingMergesIsOneAct (0.25s)
./cmd/mesh-controller --- PASS: TestAPlanFollowedFromTheStoreAnswersWhenItMoves (2.02s)
./cmd/mesh-controller --- PASS: TestNodeShowAndStatusReadTheLastSendFromTheStore (0.30s)
./cmd/mesh-controller --- PASS: TestTheConditionsVerbReadsTheLooksTheBucketNoLongerHolds (0.13s)
./cmd/mesh-controller --- PASS: TestAWalkLetGoAndStoppedByVerbsIsSaidStartedAndEnded (0.26s)
./cmd/mesh-controller --- PASS: TestAWalkStoppedOrClosedByAPersonIsSaidEndedStopped (0.27s)
./cmd/mesh-controller --- PASS: TestAWalkRetriedByAPersonIsSaidStartedAgain (0.22s)
./cmd/mesh-controller --- PASS: TestABacklogReleasedByAPersonIsSaidStarted (0.21s)
./cmd/mesh-controller --- PASS: TestAWalkEndedByCancelOrClearIsSaidEnded (0.27s)
./cmd/mesh-controller --- PASS: TestAWalkRestartedByARebuildIsSaidStarted (0.21s)
./cmd/mesh-controller --- PASS: TestAWalkStoppedByHandAndRetriedEndsFailedWhenItFailsAgain (0.27s)
./cmd/mesh-controller --- PASS: TestReplay237 (0.25s)
./cmd/mesh-controller --- PASS: TestAnUnassignThatLeavesItsNodeUnresolvedSaysSoOnceInItsAnswer (0.26s)
./cmd/mesh-controller --- PASS: TestAnUnassignThatLeavesItsNodeResolvedSaysNothingOfIt (0.47s)
./cmd/mesh-controller --- PASS: TestAnAssignThatLeavesItsNodeUnresolvedSaysOnlyThePlansRefusal (0.45s)
./cmd/mesh-controller --- PASS: TestADirectoryOwnersKeyIsRefusedThroughAVerb (0.25s)
./cmd/mesh-controller --- PASS: TestTheSendMakesNoValueForAnOutsideSecretNobodyGave (0.39s)
./cmd/mesh-controller --- PASS: TestAQuestionComposesWithoutAnOutsideSecretNobodyGave (0.39s)
./cmd/mesh-controller --- PASS: TestReplay201 (0.29s)
./cmd/mesh-controller --- PASS: TestARollbackWhoseSendWasRefusedIsCompletedByTheNextSend (0.20s)
./cmd/mesh-controller --- PASS: TestAGateJudgesTheOtherMovesBesideAKeptCore (0.20s)
./cmd/mesh-controller --- PASS: TestReplay401 (0.34s)
./cmd/mesh-controller --- PASS: TestReplay201ThePlansSend (0.30s)
./cmd/mesh-controller --- PASS: TestPlanAndNodeListAnOptionalRequirementLeftUnbound (0.32s)
./cmd/mesh-controller --- PASS: TestReplay340 (0.31s)
./cmd/mesh-controller --- PASS: TestOnlyATrustedFilesNamedKeyIsRefusedThroughAVerb (0.21s)
./cmd/mesh-controller --- PASS: TestReplay349 (0.25s)
./cmd/mesh-controller --- PASS: TestReplay348AFaultFromBeforeTheSendFailsNoGate (0.21s)
./cmd/mesh-controller --- PASS: TestReplay239AModuleNameIsNotTakenOverByAnotherRepository (0.17s)
./cmd/mesh-controller --- PASS: TestAWalkThatMovedNothingSaysWhichModulesMatchedWhatRuns (0.24s)
./cmd/mesh-controller --- PASS: TestAWalkWhoseEveryBuildCameOutTheSameIsDone (0.18s)
./cmd/mesh-controller --- PASS: TestReplay614ANewSDKPlansTheToolchainAndThenItsBundles (0.09s)
./cmd/mesh-controller --- PASS: TestOneAcceptForAProviderIsPlacedForEveryConsumer (0.98s)
./cmd/mesh-controller --- PASS: TestReplay164 (0.33s)
./cmd/mesh-controller --- PASS: TestAnApprovedLayerOpensTheWalkThatSendsIt (0.21s)
./cmd/mesh-controller --- PASS: TestASettingsWalkSendsOneMachineAtATimeEachJudged (0.20s)
./cmd/mesh-controller --- PASS: TestAFailedSettingsWalkStopsAndHoldsNothingBack (0.20s)
./cmd/mesh-controller --- PASS: TestASettingsWalkSendsTheLayerAloneEveryBuildKept (0.21s)
./cmd/mesh-controller --- PASS: TestASettingsWalkStopsBeforeADataMoveAndPassesOverAMachineAway (0.55s)
./cmd/mesh-controller --- PASS: TestACrossingSendSupersedesASettingsGate (0.19s)
./cmd/mesh-controller --- PASS: TestASettingsWalkFailsOnARefusalThatCannotClear (0.17s)
./cmd/mesh-controller --- PASS: TestAProviderElsewhereServesItsOwnComposedName (0.26s)
./cmd/mesh-controller --- PASS: TestAReusedCheckBuildIsRegisteredByItsDigestAndGatedAsABuiltOne (0.40s)
./cmd/mesh-controller --- PASS: TestTheMergeGateJudgesEachManifestAgainstTheListOfTheTree (5.36s)
./cmd/mesh-controller --- PASS: TestRegistrationPublishesTheNewestTrunkListAndJudgesEveryModuleAgainstIt (0.20s)
./cmd/mesh-controller --- PASS: TestADeclarationIsTheSameAfterPlacementMoves (0.42s)
./cmd/mesh-controller --- PASS: TestAReleaseSendsTheRestAtOnceAfterTheFirstPasses (0.27s)
./cmd/mesh-controller --- PASS: TestARestMachineThatFailsIsPutBackAloneAndTheOthersAreJudgedOn (0.23s)
./cmd/mesh-controller --- PASS: TestAWalkTakesOverTheReadingsOfAGateJudgingTheSameBuildThere (0.19s)
./cmd/mesh-controller --- PASS: TestAFirstSendMadeAndNotKeptIsNotSentAgain (0.26s)
./cmd/mesh-controller --- PASS: TestAReleaseSendKeptAndMadeIsNotMadeAgain (0.19s)
./cmd/mesh-controller --- PASS: TestAFirstMachineThatFailsStillStopsTheWalk (0.20s)
./cmd/mesh-controller --- PASS: TestTheControlNodeIsSentLastInAStep (0.24s)
./cmd/mesh-controller --- PASS: TestARestMachineSilentPastItsBoundIsLeftAndSaid (0.24s)
./cmd/mesh-controller --- PASS: TestANoMoveTierWaitsForNoNewReport (0.32s)
./cmd/mesh-controller --- PASS: TestOneProviderDownAndThreeConsumersFailingAreOneCondition (0.19s)
./cmd/mesh-controller --- PASS: TestAConsumerFailingBesideAHealthyProviderIsItsOwn (0.18s)
./cmd/mesh-controller --- PASS: TestTheProvisionerClientsAccountIsIssuedForItsServiceAndNeverInvented (0.21s)
./cmd/mesh-controller --- PASS: TestAcceptOfAnOwnSecretTakesThePathOfItsModulesForm (0.25s)
./cmd/mesh-controller --- PASS: TestAcceptForAProviderTakesThePathOfTheProvidersModule (0.27s)
./cmd/mesh-controller --- PASS: TestAcceptForAMovedTrustedModuleAnnouncesBeforeTheVaultIsAsked (0.27s)
./cmd/mesh-controller --- PASS: TestAcceptForAMovedModuleRecordsAHandActAndNeverTheValue (0.22s)
./cmd/mesh-controller --- PASS: TestAcceptOfAnOutsideOfferTakesThePathOfTheProvidersModule (0.29s)
./cmd/mesh-controller --- PASS: TestAnAskAtTheDeskTakesThePathOfItsModulesForm (0.27s)
./cmd/mesh-controller --- PASS: TestAnIssuedValueTakesThePathOfItsProvidersModule (0.32s)
./cmd/mesh-controller --- PASS: TestARotationTakesThePathOfItsModulesForm (0.24s)
./cmd/mesh-controller --- PASS: TestADeclarationIsTheSameWhileTheWordsAreStillInTheLayers (2.57s)
./cmd/mesh-controller --- PASS: TestADeclarationIsTheSameAfterTheMoveOfPlacement (5.10s)
./cmd/mesh-controller --- PASS: TestTheSendSealsNoSecretOfAModuleHandedThere (0.27s)
./cmd/mesh-controller --- PASS: TestAModulesSecretsAreTheVaultsOnceItIsMarkedMoved (0.19s)
./cmd/mesh-controller --- PASS: TestEveryMachineIsToldTheSameAfterTheMoveOfConfig (24.42s)
./cmd/mesh-controller --- PASS: TestTheMoveOfConfigRefusesWhatWouldChangeAMachine (8.49s)
./cmd/mesh-controller --- PASS: TestTheSettingsVerbForwardsToConfigOnceTheValuesMoved (11.45s)
./cmd/mesh-controller --- PASS: TestTheSendCarriesTheVaultsBoxForACoreCredentialAndKeepsIt (0.39s)
./cmd/mesh-controller --- PASS: TestASilentVaultHoldsTheKeptBoxAndSaysSo (0.40s)
./cmd/mesh-controller --- PASS: TestACoreModuleFirstPlacedWhileTheVaultIsSilentIsSealedByTheController (0.29s)
./cmd/mesh-controller --- PASS: TestAnEngineBelowTheContractIsSentTheControllersSealAsBefore (0.34s)
./cmd/mesh-controller --- PASS: TestModuleIssueHandsACoveredAccountToTheVaultAndOnlyThat (0.31s)
./cmd/mesh-controller --- PASS: TestModuleIssueFailsWhenTheVaultDoesNotTakeACoveredAccount (0.25s)
./cmd/mesh-controller --- PASS: TestModuleIssueBeforeTheVaultIsInstalledKeepsTheValueAndHandsNothing (0.28s)
./cmd/mesh-controller --- PASS: TestARecordedModulesBundleOnlyMoveRollsOutInItsWalk (0.34s)
./cmd/mesh-controller --- PASS: TestARecordedModulesMoveThatRecreatesAContainerWaits (0.75s)
./cmd/mesh-controller --- PASS: TestARecordedModulesMoveThatTouchesDataOrAProviderWaits (0.73s)
./cmd/mesh-controller --- PASS: TestAPersonsRecordAndTheBusHoldEveryMove (0.52s)
./cmd/mesh-controller --- PASS: TestARecordedMoveThatCannotBeJudgedWaits (0.36s)
./cmd/mesh-controller --- PASS: TestReplay867 (3.99s)
./cmd/mesh-controller --- PASS: TestReplay867Recheck (3.81s)
./cmd/mesh-controller --- PASS: TestTheRecheckVerbAsksMeshDeliveryOnABusOfItsOwn (0.35s)
./cmd/mesh-controller --- PASS: TestAGroupsCompositionIntoAReleaseBranchIsJudgedByItsOwnController (3.54s)
./cmd/mesh-controller --- PASS: TestAGroupsCompositionJudgedWithTheValidatorIntoAReleaseBranchIsJudgedByItsOwnController (3.24s)
./internal/inventory --- PASS: TestTheLastSendSaysWhatTheMachineAnswered (0.13s)
./internal/inventory --- PASS: TestAReportIsTheLastSendsAnswerOnlyWhenItIsAboutThatSend (0.16s)
./internal/inventory --- PASS: TestAnIssuedValueIsSealedToEveryHolderOnceAndNotAgain (0.09s)
./internal/inventory --- PASS: TestAnIssuedValueIsSealedAgainAfterAKeyChangeOrAnAcceptance (0.09s)
./internal/inventory --- PASS: TestAConditionsLooksAreKeptBesideTheBucket (0.07s)
./internal/inventory --- PASS: TestAPlanIdHoldingAQuoteIsReadAsAPlainId (0.12s)
./internal/inventory --- PASS: TestAWalksStartIsKeptAndARefusedSaveLeavesItUnsaid (0.13s)
./internal/inventory --- PASS: TestAWalksRestIsReadFromEachMachinesOwnSend (0.12s)
./internal/inventory --- PASS: TestAStoredBuildWithASilentMergeableFileIsStillReadAndComposed (0.11s)
./internal/inventory --- PASS: TestACredentialIssuedOutsideIsNeverMade (0.09s)
./internal/inventory --- PASS: TestOneAcceptForAProviderIsSealedToEveryConsumer (0.08s)
./internal/inventory --- PASS: TestASharedOwnSecretIssuedOutsideIsNeverMade (0.08s)
./internal/inventory --- PASS: TestAModuleInTheConfigFormIsMirroredWithItsWholeDeclaration (0.12s)
./internal/inventory --- PASS: TestAReportOfABusyContainerIsKeptAndReadBack (0.08s)
./internal/inventory --- PASS: TestANewerBuildsListReplacesTheKeptOneAndAnOlderOneHeardLaterDoesNot (0.13s)
./internal/inventory --- PASS: TestPlacementMovesOutOfTheSettingsLayers (0.38s)
./internal/inventory --- PASS: TestASettingRoutesPlacementBesideTheLayer (0.14s)
./internal/inventory --- PASS: TestTheProvisionerClientsMachineHasAnAccountOfItsOwn (0.10s)
./internal/inventory --- PASS: TestTheFourWordsAreKeptBesideTheLayer (0.14s)
./internal/inventory --- PASS: TestALayerStillHoldingTheWordsReadsThemAsPlacement (0.13s)
./internal/inventory --- PASS: TestTheMoveOfPlacementMovesWhatTheLayersStillHold (0.12s)
./internal/inventory --- PASS: TestTheMoveReadsEveryRowSealedToAMachineAsItIs (0.14s)
./internal/inventory --- PASS: TestASendKeepsThePlansItHandedAndTheMirrorCarriesThem (0.16s)
./internal/inventory --- PASS: TestTheLayersAreReadUntilTheMoveOfConfigHasRun (0.09s)
./internal/inventory --- PASS: TestAModuleReadsMeshConfigOnlyWhereItsValuesAre (0.10s)
./internal/inventory --- PASS: TestTheEndOfTheMoveRefusesALayerChangedSinceItWasRead (0.09s)
./internal/inventory --- PASS: TestACoreCredentialsVaultBoxIsKeptPerMachineAndReplaced (0.07s)
./internal/inventory --- PASS: TestWhatRunsIsTheRegisteredBuildNotANewerOnePutBack (0.14s)
./internal/recordmirror --- PASS: TestNatsAnAssignmentAndARegistrationEachChangeOneKeyAndRaiseOneEvent (3.58s)
./internal/recordmirror --- PASS: TestNatsTheListOfPredefinedKeysKeptChangesTheMirrorsOneKey (1.49s)
the suite failed: each package or shard that failed is said above with its output
--- what failed, picked from the whole of its output (the whole is in the build's log)
--- FAIL: TestEveryCatalogueManifestParses (1.95s)
catalogue_check_test.go:26: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
catalogue_check_test.go:39: claude-code: this manifest cannot be used:
- claude-code's config value "managed_settings": falls back to the predefined key "agent-managed-settings", and the list of predefined keys (predefined.json at the root of the catalogue's repository) is not present where it is judged: a value falls back only to a key on that list; judge it in the catalogue, or leave "predefined" out (novox/hq ADR 0348 §7)
catalogue_check_test.go:39: dunst: this manifest cannot be used:
- dunst's config value "font-size": falls back to the predefined key "font-size", and the list of predefined keys (predefined.json at the root of the catalogue's repository) is not present where it is judged: a value falls back only to a key on that list; judge it in the catalogue, or leave "predefined" out (novox/hq ADR 0348 §7)
catalogue_check_test.go:52: 133 manifests, 71 named endpoints, 29 routed endpoints resolved
--- FAIL: TestNoCatalogueManifestNamesAnInstallation (2.26s)
catalogue_check_test.go:62: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
catalogue_check_test.go:75: /var/lib/build-agent/workspace/check/mesh-catalog/modules/claude-code/module.json: this manifest cannot be used:
- claude-code's config value "managed_settings": falls back to the predefined key "agent-managed-settings", and the list of predefined keys (predefined.json at the root of the catalogue's repository) is not present where it is judged: a value falls back only to a key on that list; judge it in the catalogue, or leave "predefined" out (novox/hq ADR 0348 §7)
catalogue_check_test.go:75: /var/lib/build-agent/workspace/check/mesh-catalog/modules/dunst/module.json: this manifest cannot be used:
- dunst's config value "font-size": falls back to the predefined key "font-size", and the list of predefined keys (predefined.json at the root of the catalogue's repository) is not present where it is judged: a value falls back only to a key on that list; judge it in the catalogue, or leave "predefined" out (novox/hq ADR 0348 §7)
--- FAIL: TestEveryCatalogueIdentityFitsWhatItRequires (0.07s)
catalogue_check_test.go:124: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
catalogue_check_test.go:137: /var/lib/build-agent/workspace/check/mesh-catalog/modules/claude-code/module.json: this manifest cannot be used:
- claude-code's config value "managed_settings": falls back to the predefined key "agent-managed-settings", and the list of predefined keys (predefined.json at the root of the catalogue's repository) is not present where it is judged: a value falls back only to a key on that list; judge it in the catalogue, or leave "predefined" out (novox/hq ADR 0348 §7)
--- FAIL: TestCaTrustRendersTheAuthorityItWasBoundTo (0.01s)
catrust_manifest_test.go:22: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
catrust_manifest_test.go:52: the script does not fetch from the authority it was bound to:
catrust_manifest_test.go:71: the unit does not say "ExecStart=/var/lib/ca-trust/anchor install":
catrust_manifest_test.go:71: the unit does not say "ExecStop=/var/lib/ca-trust/anchor remove":
catrust_manifest_test.go:71: the unit does not say "RemainAfterExit=yes":
--- FAIL: TestTheFilterModuleNeverFlushesTheRuleset (0.00s)
foundation_manifests_test.go:45: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
foundation_manifests_test.go:70: the unit does not load the computed rule set and delete only its own table:
--- FAIL: TestTheForgesOwnAddressFollowsThePortTheNodeGaveIt (0.04s)
foundation_manifests_test.go:189: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
foundation_manifests_test.go:189: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
foundation_manifests_test.go:191: the forge's manifest does not resolve against its own build: gitea names templates, and the build carried no text read back from the archive it packs files/ into ("files"): the builder that built it does not read templates
--- FAIL: TestTheForgesSshPortIsTheMeshsFixedConventionByDefault (0.04s)
foundation_manifests_test.go:278: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
foundation_manifests_test.go:288: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
foundation_manifests_test.go:288: the forge's manifest does not resolve against its own build: gitea names templates, and the build carried no text read back from the archive it packs files/ into ("files"): the builder that built it does not read templates
--- FAIL: TestANodeMayGiveTheForgesSshPortADifferentNumber (0.04s)
foundation_manifests_test.go:299: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
foundation_manifests_test.go:308: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
foundation_manifests_test.go:308: the forge's manifest does not resolve against its own build: gitea names templates, and the build carried no text read back from the archive it packs files/ into ("files"): the builder that built it does not read templates
--- FAIL: TestTheRuntimesModuleTrustsTheMeshsRegistry (0.02s)
generated_collision_test.go:60: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
generated_collision_test.go:75: the runtime's file says ""
--- FAIL: TestGenesisAssignsTheBuildAgentWithNothingProvidingTheRegistry (0.01s)
genesis_registry_test.go:26: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
genesis_registry_test.go:26: the build agent does not resolve against its own build: build-agent says it builds files and the build did not produce it — the build did not do what the manifest asked, which is a different fault from a resource asking for the wrong thing
--- FAIL: TestTheMachinesNameIsItsSetting (0.00s)
hostname_seat_test.go:59: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
panic: interface conversion: interface {} is nil, not string [recovered, repanicked]
goroutine 398 [running]:
testing.tRunner.func1.2({0xdeea40, 0xc000412750})
/usr/local/go/src/testing/testing.go:1974 +0x419
testing.tRunner.func1()
/usr/local/go/src/testing/testing.go:1977 +0x67f
panic({0xdeea40?, 0xc000412750?})
/usr/local/go/src/runtime/panic.go:860 +0x13a
github.com/novox/mesh-controller/internal/catalogue.TestTheMachinesNameIsItsSetting.func1(0x0)
/var/lib/build-agent/workspace/check/mesh-controller/internal/catalogue/hostname_seat_test.go:77 +0x6b0
github.com/novox/mesh-controller/internal/catalogue.TestTheMachinesNameIsItsSetting(0xc00022b208)
/var/lib/build-agent/workspace/check/mesh-controller/internal/catalogue/hostname_seat_test.go:84 +0x609
testing.tRunner(0xc00022b208, 0xedf028)
/usr/local/go/src/testing/testing.go:2036 +0x21d
created by testing.(*T).Run in goroutine 1
/usr/local/go/src/testing/testing.go:2101 +0xb13
FAIL github.com/novox/mesh-controller/internal/catalogue 7.319s
--- FAIL: TestTheResolverIsToldEveryMachineOnTheNetworkAndToldAgainWhenOneLeaves (0.26s)
network_test.go:265: judged against /var/lib/build-agent/workspace/check/mesh-catalog as cloned beside this check
network_test.go:265: dnsmasq is not registered: dnsmasq still names the template(s) of config (files/dnsmasq.conf), wait-for-address (files/mesh.conf): the manifest the mesh holds carries each file's text, read back from the build's templates archive — this one was resolved by a builder that does not read templates, or not built at all (novox/hq ADR 0349 §2)
FAIL github.com/novox/mesh-controller/cmd/mesh-controller 78s (shard 7 of 8: 128 tests)
```
mesh/merge-gate: PASS — every machine composes with the change as it did without (3 of 4 compose) (modules: build-agent, mesh-controller)
mesh/repo-check: PASS — its merge-check.sh passed
Delivery plan — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step
tier 0: mesh-controller
tier 1: build-agent
ace: receives build-agent
g14: receives build-agent
novox: receives mesh-controller, build-agent
shanks: receives build-agent
build-agent keeps data (ADR 0233): what it holds is backed up before it moves
grants step: if this changes what the bus's user list says (a new tool, subject or user), novox is sent that list alone, every build there kept, before build-agent is judged on its first machine
read by no module's build: internal/catalogue/delivery_seat_test.go
Run by the build seat on shanks as build-1792156189077327789 (builds --log build-1792156189077327789).
--- the gate: build-agent, mesh-controller
mesh-controller: ok, 63 tool(s); WARNING: merge-window ask(s) for a setting and do(es) not say whether it is trusted, so it counts as trusted: set at the terminal alone; say "trusted" false where nothing trusts it (novox/hq issue 339); WARNING: controller stay(s) up and say(s) not how it is ready — judged by liveness alone, refused from 2026-11-18 (ADR 0240 rule 8)
long-running resources without health: 1
files asking for a setting without saying whether it is trusted: 1
1 manifest(s) checked. Judged against the seats this binary carries; a claim on one of the mesh's own seats is judged fully at registration, and a seat declared by a module not given here reads as unknown. Identities judged on a 6-character machine name, against the bounds of the providers given here
judging 1 module(s) changed against 4 machine(s), as the snapshot of 2026-10-16T13:00:06Z says they run
composing every machine as the mesh is
the bus's user list leaves out 6 user(s) the mesh has minted no credential for: controller, node.f35, provisioner.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 6 user(s) the mesh has minted no credential for: controller, node.f35, provisioner.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
composing every machine with the change
the bus's user list leaves out 6 user(s) the mesh has minted no credential for: controller, node.f35, provisioner.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 6 user(s) the mesh has minted no credential for: controller, node.f35, provisioner.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
merge gate: PASS — every machine composes with the change as it did without (3 of 4 compose)
judged by controller development build against the facts of 2026-10-16T13:00:06Z
modules the change moves:
- mesh-controller (changed)
machines:
- a machine (f35): does not compose
- holds mesh-dns-resolver (idt): composes
- holds git, holds mesh-artifact-store, holds mesh-broker, holds mesh-catalog, holds mesh-config, holds mesh-delivery, holds mesh-dns-resolver, holds mesh-provisioner, holds mesh-store, holds mesh-vault, holds npm-package-registry, the control node, the hub (ygcyr): composes
- a machine (yvbpsm): composes
a merge would rebuild 2 module(s) in 2 tier(s): build-agent, mesh-controller
notes:
- a machine (f35) does not compose on the mesh today either: mesh-provisioner-client on f35 has no bus credential: nothing was issued for provisioner.f35, and a push would seal a placeholder its process cannot read (ygcyr/hq issue 203). `module issue mesh-provisioner-client --node f35`, then push again
- internal/catalogue/delivery_seat_test.go read by no module's build, and rebuild nothing (issue 280)
--- its merge-check.sh (go toolchain)
ok github.com/novox/mesh-controller/cmd/mesh-builder 1.128s
ok github.com/novox/mesh-controller/examples/objectstore-provisioner 1.018s
ok github.com/novox/mesh-controller/examples/postgres-provisioner 1.030s
ok github.com/novox/mesh-controller/examples/redis-provisioner 1.020s
ok github.com/novox/mesh-controller/examples/route-proxy 1.169s
ok github.com/novox/mesh-controller/internal/artifacts 1.061s
? github.com/novox/mesh-controller/internal/beside [no test files]
ok github.com/novox/mesh-controller/internal/broker 54.605s
ok github.com/novox/mesh-controller/internal/catalogue 21.325s
ok github.com/novox/mesh-controller/internal/conditions 3.746s
ok github.com/novox/mesh-controller/internal/envfile 1.075s
ok github.com/novox/mesh-controller/internal/facts 1.046s
ok github.com/novox/mesh-controller/internal/identity 7.379s
ok github.com/novox/mesh-controller/internal/lease 10.377s
ok github.com/novox/mesh-controller/internal/licences 6.187s
ok github.com/novox/mesh-controller/internal/licences/adapters 1.104s
ok github.com/novox/mesh-controller/internal/lint 4.738s
ok github.com/novox/mesh-controller/internal/outward 1.188s
ok github.com/novox/mesh-controller/internal/overlay 1.126s
ok github.com/novox/mesh-controller/internal/recordmirror 16.000s
ok github.com/novox/mesh-controller/internal/secrets 1.829s
ok github.com/novox/mesh-controller/internal/store 4.668s
ok github.com/novox/mesh-controller/internal/testbus 1.323s
ok github.com/novox/mesh-controller/internal/token 1.080s
ok github.com/novox/mesh-controller/cmd/mesh-controller 43s (shard 1 of 8: 129 tests)
ok github.com/novox/mesh-controller/cmd/mesh-controller 44s (shard 2 of 8: 129 tests)
ok github.com/novox/mesh-controller/cmd/mesh-controller 154s (shard 3 of 8: 128 tests)
ok github.com/novox/mesh-controller/cmd/mesh-controller 76s (shard 4 of 8: 128 tests)
ok github.com/novox/mesh-controller/cmd/mesh-controller 49s (shard 5 of 8: 128 tests)
ok github.com/novox/mesh-controller/cmd/mesh-controller 114s (shard 6 of 8: 128 tests)
ok github.com/novox/mesh-controller/cmd/mesh-controller 91s (shard 7 of 8: 128 tests)
ok github.com/novox/mesh-controller/cmd/mesh-controller 75s (shard 8 of 8: 128 tests)
ok github.com/novox/mesh-controller/internal/inventory 17s (shard 1 of 4: 77 tests)
ok github.com/novox/mesh-controller/internal/inventory 17s (shard 2 of 4: 77 tests)
ok github.com/novox/mesh-controller/internal/inventory 16s (shard 3 of 4: 77 tests)
ok github.com/novox/mesh-controller/internal/inventory 16s (shard 4 of 4: 77 tests)
ok github.com/novox/mesh-controller/internal/builder 16s (shard 1 of 4: 55 tests)
ok github.com/novox/mesh-controller/internal/builder 18s (shard 2 of 4: 55 tests)
ok github.com/novox/mesh-controller/internal/builder 37s (shard 3 of 4: 55 tests)
ok github.com/novox/mesh-controller/internal/builder 39s (shard 4 of 4: 55 tests)
ok github.com/novox/mesh-controller/internal/link 14s (shard 1 of 4: 48 tests)
ok github.com/novox/mesh-controller/internal/link 18s (shard 2 of 4: 48 tests)
ok github.com/novox/mesh-controller/internal/link 16s (shard 3 of 4: 47 tests)
ok github.com/novox/mesh-controller/internal/link 20s (shard 4 of 4: 47 tests)
store tests, each run against the store:
./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeWalksTheOthersAgain (0.29s)
./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeEndsTheMergesThatContainIt (0.36s)
./cmd/mesh-controller --- PASS: TestAStopWalksTheOthersAgainInTheOpenBatch (0.31s)
./cmd/mesh-controller --- PASS: TestAStopNamesWhatStaysOnTheMachinesAndWhatStillCarriesIt (0.27s)
./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeLeavesItOutOfABatch (0.42s)
./cmd/mesh-controller --- PASS: TestSavingPlansAndMovingMergesIsOneAct (0.45s)
./cmd/mesh-controller --- PASS: TestAPlanFollowedFromTheStoreAnswersWhenItMoves (2.05s)
./cmd/mesh-controller --- PASS: TestNodeShowAndStatusReadTheLastSendFromTheStore (1.42s)
./cmd/mesh-controller --- PASS: TestTheConditionsVerbReadsTheLooksTheBucketNoLongerHolds (0.14s)
./cmd/mesh-controller --- PASS: TestAWalkLetGoAndStoppedByVerbsIsSaidStartedAndEnded (0.28s)
./cmd/mesh-controller --- PASS: TestAWalkStoppedOrClosedByAPersonIsSaidEndedStopped (0.27s)
./cmd/mesh-controller --- PASS: TestAWalkRetriedByAPersonIsSaidStartedAgain (0.25s)
./cmd/mesh-controller --- PASS: TestABacklogReleasedByAPersonIsSaidStarted (0.24s)
./cmd/mesh-controller --- PASS: TestAWalkEndedByCancelOrClearIsSaidEnded (0.29s)
./cmd/mesh-controller --- PASS: TestAWalkRestartedByARebuildIsSaidStarted (0.27s)
./cmd/mesh-controller --- PASS: TestAWalkStoppedByHandAndRetriedEndsFailedWhenItFailsAgain (0.29s)
./cmd/mesh-controller --- PASS: TestReplay237 (0.27s)
./cmd/mesh-controller --- PASS: TestAnUnassignThatLeavesItsNodeUnresolvedSaysSoOnceInItsAnswer (0.43s)
./cmd/mesh-controller --- PASS: TestAnUnassignThatLeavesItsNodeResolvedSaysNothingOfIt (0.41s)
./cmd/mesh-controller --- PASS: TestAnAssignThatLeavesItsNodeUnresolvedSaysOnlyThePlansRefusal (0.29s)
./cmd/mesh-controller --- PASS: TestADirectoryOwnersKeyIsRefusedThroughAVerb (0.30s)
./cmd/mesh-controller --- PASS: TestTheSendMakesNoValueForAnOutsideSecretNobodyGave (0.43s)
./cmd/mesh-controller --- PASS: TestAQuestionComposesWithoutAnOutsideSecretNobodyGave (0.40s)
./cmd/mesh-controller --- PASS: TestReplay201 (0.24s)
./cmd/mesh-controller --- PASS: TestARollbackWhoseSendWasRefusedIsCompletedByTheNextSend (0.28s)
./cmd/mesh-controller --- PASS: TestAGateJudgesTheOtherMovesBesideAKeptCore (0.23s)
./cmd/mesh-controller --- PASS: TestReplay401 (0.37s)
./cmd/mesh-controller --- PASS: TestReplay201ThePlansSend (0.29s)
./cmd/mesh-controller --- PASS: TestPlanAndNodeListAnOptionalRequirementLeftUnbound (0.33s)
./cmd/mesh-controller --- PASS: TestReplay340 (0.31s)
./cmd/mesh-controller --- PASS: TestOnlyATrustedFilesNamedKeyIsRefusedThroughAVerb (0.23s)
./cmd/mesh-controller --- PASS: TestReplay349 (0.25s)
./cmd/mesh-controller --- PASS: TestReplay348AFaultFromBeforeTheSendFailsNoGate (0.21s)
./cmd/mesh-controller --- PASS: TestReplay239AModuleNameIsNotTakenOverByAnotherRepository (0.19s)
./cmd/mesh-controller --- PASS: TestAWalkThatMovedNothingSaysWhichModulesMatchedWhatRuns (0.32s)
./cmd/mesh-controller --- PASS: TestAWalkWhoseEveryBuildCameOutTheSameIsDone (0.21s)
./cmd/mesh-controller --- PASS: TestReplay614ANewSDKPlansTheToolchainAndThenItsBundles (0.09s)
./cmd/mesh-controller --- PASS: TestOneAcceptForAProviderIsPlacedForEveryConsumer (0.65s)
./cmd/mesh-controller --- PASS: TestReplay164 (0.35s)
./cmd/mesh-controller --- PASS: TestAnApprovedLayerOpensTheWalkThatSendsIt (0.26s)
./cmd/mesh-controller --- PASS: TestASettingsWalkSendsOneMachineAtATimeEachJudged (0.24s)
./cmd/mesh-controller --- PASS: TestAFailedSettingsWalkStopsAndHoldsNothingBack (0.23s)
./cmd/mesh-controller --- PASS: TestASettingsWalkSendsTheLayerAloneEveryBuildKept (0.23s)
./cmd/mesh-controller --- PASS: TestASettingsWalkStopsBeforeADataMoveAndPassesOverAMachineAway (0.62s)
./cmd/mesh-controller --- PASS: TestACrossingSendSupersedesASettingsGate (0.20s)
./cmd/mesh-controller --- PASS: TestASettingsWalkFailsOnARefusalThatCannotClear (0.21s)
./cmd/mesh-controller --- PASS: TestAProviderElsewhereServesItsOwnComposedName (0.28s)
./cmd/mesh-controller --- PASS: TestAReusedCheckBuildIsRegisteredByItsDigestAndGatedAsABuiltOne (0.52s)
./cmd/mesh-controller --- PASS: TestTheMergeGateJudgesEachManifestAgainstTheListOfTheTree (5.73s)
./cmd/mesh-controller --- PASS: TestRegistrationPublishesTheNewestTrunkListAndJudgesEveryModuleAgainstIt (0.24s)
./cmd/mesh-controller --- PASS: TestADeclarationIsTheSameAfterPlacementMoves (0.42s)
./cmd/mesh-controller --- PASS: TestAReleaseSendsTheRestAtOnceAfterTheFirstPasses (0.31s)
./cmd/mesh-controller --- PASS: TestARestMachineThatFailsIsPutBackAloneAndTheOthersAreJudgedOn (0.27s)
./cmd/mesh-controller --- PASS: TestAWalkTakesOverTheReadingsOfAGateJudgingTheSameBuildThere (0.25s)
./cmd/mesh-controller --- PASS: TestAFirstSendMadeAndNotKeptIsNotSentAgain (0.29s)
./cmd/mesh-controller --- PASS: TestAReleaseSendKeptAndMadeIsNotMadeAgain (0.23s)
./cmd/mesh-controller --- PASS: TestAFirstMachineThatFailsStillStopsTheWalk (0.26s)
./cmd/mesh-controller --- PASS: TestTheControlNodeIsSentLastInAStep (0.26s)
./cmd/mesh-controller --- PASS: TestARestMachineSilentPastItsBoundIsLeftAndSaid (0.31s)
./cmd/mesh-controller --- PASS: TestANoMoveTierWaitsForNoNewReport (0.30s)
./cmd/mesh-controller --- PASS: TestOneProviderDownAndThreeConsumersFailingAreOneCondition (0.21s)
./cmd/mesh-controller --- PASS: TestAConsumerFailingBesideAHealthyProviderIsItsOwn (0.19s)
./cmd/mesh-controller --- PASS: TestTheProvisionerClientsAccountIsIssuedForItsServiceAndNeverInvented (0.22s)
./cmd/mesh-controller --- PASS: TestAcceptOfAnOwnSecretTakesThePathOfItsModulesForm (0.30s)
./cmd/mesh-controller --- PASS: TestAcceptForAProviderTakesThePathOfTheProvidersModule (0.30s)
./cmd/mesh-controller --- PASS: TestAcceptForAMovedTrustedModuleAnnouncesBeforeTheVaultIsAsked (0.29s)
./cmd/mesh-controller --- PASS: TestAcceptForAMovedModuleRecordsAHandActAndNeverTheValue (0.24s)
./cmd/mesh-controller --- PASS: TestAcceptOfAnOutsideOfferTakesThePathOfTheProvidersModule (0.33s)
./cmd/mesh-controller --- PASS: TestAnAskAtTheDeskTakesThePathOfItsModulesForm (0.31s)
./cmd/mesh-controller --- PASS: TestAnIssuedValueTakesThePathOfItsProvidersModule (0.34s)
./cmd/mesh-controller --- PASS: TestARotationTakesThePathOfItsModulesForm (0.27s)
./cmd/mesh-controller --- PASS: TestADeclarationIsTheSameWhileTheWordsAreStillInTheLayers (2.80s)
./cmd/mesh-controller --- PASS: TestADeclarationIsTheSameAfterTheMoveOfPlacement (5.26s)
./cmd/mesh-controller --- PASS: TestTheSendSealsNoSecretOfAModuleHandedThere (0.30s)
./cmd/mesh-controller --- PASS: TestAModulesSecretsAreTheVaultsOnceItIsMarkedMoved (0.19s)
./cmd/mesh-controller --- PASS: TestEveryMachineIsToldTheSameAfterTheMoveOfConfig (26.90s)
./cmd/mesh-controller --- PASS: TestTheMoveOfConfigRefusesWhatWouldChangeAMachine (9.67s)
./cmd/mesh-controller --- PASS: TestTheSettingsVerbForwardsToConfigOnceTheValuesMoved (11.70s)
./cmd/mesh-controller --- PASS: TestTheSendCarriesTheVaultsBoxForACoreCredentialAndKeepsIt (0.42s)
./cmd/mesh-controller --- PASS: TestASilentVaultHoldsTheKeptBoxAndSaysSo (0.36s)
./cmd/mesh-controller --- PASS: TestACoreModuleFirstPlacedWhileTheVaultIsSilentIsSealedByTheController (0.37s)
./cmd/mesh-controller --- PASS: TestAnEngineBelowTheContractIsSentTheControllersSealAsBefore (0.28s)
./cmd/mesh-controller --- PASS: TestModuleIssueHandsACoveredAccountToTheVaultAndOnlyThat (0.34s)
./cmd/mesh-controller --- PASS: TestModuleIssueFailsWhenTheVaultDoesNotTakeACoveredAccount (0.28s)
./cmd/mesh-controller --- PASS: TestModuleIssueBeforeTheVaultIsInstalledKeepsTheValueAndHandsNothing (0.30s)
./cmd/mesh-controller --- PASS: TestARecordedModulesBundleOnlyMoveRollsOutInItsWalk (0.39s)
./cmd/mesh-controller --- PASS: TestARecordedModulesMoveThatRecreatesAContainerWaits (0.71s)
./cmd/mesh-controller --- PASS: TestARecordedModulesMoveThatTouchesDataOrAProviderWaits (0.77s)
./cmd/mesh-controller --- PASS: TestAPersonsRecordAndTheBusHoldEveryMove (0.53s)
./cmd/mesh-controller --- PASS: TestARecordedMoveThatCannotBeJudgedWaits (0.37s)
./cmd/mesh-controller --- PASS: TestReplay867 (4.52s)
./cmd/mesh-controller --- PASS: TestReplay867Recheck (4.46s)
./cmd/mesh-controller --- PASS: TestTheRecheckVerbAsksMeshDeliveryOnABusOfItsOwn (0.40s)
./cmd/mesh-controller --- PASS: TestAGroupsCompositionIntoAReleaseBranchIsJudgedByItsOwnController (4.10s)
./cmd/mesh-controller --- PASS: TestAGroupsCompositionJudgedWithTheValidatorIntoAReleaseBranchIsJudgedByItsOwnController (4.06s)
./internal/inventory --- PASS: TestTheLastSendSaysWhatTheMachineAnswered (0.17s)
./internal/inventory --- PASS: TestAReportIsTheLastSendsAnswerOnlyWhenItIsAboutThatSend (0.17s)
./internal/inventory --- PASS: TestAnIssuedValueIsSealedToEveryHolderOnceAndNotAgain (0.10s)
./internal/inventory --- PASS: TestAnIssuedValueIsSealedAgainAfterAKeyChangeOrAnAcceptance (0.11s)
./internal/inventory --- PASS: TestAConditionsLooksAreKeptBesideTheBucket (0.07s)
./internal/inventory --- PASS: TestAPlanIdHoldingAQuoteIsReadAsAPlainId (0.08s)
./internal/inventory --- PASS: TestAWalksStartIsKeptAndARefusedSaveLeavesItUnsaid (0.15s)
./internal/inventory --- PASS: TestAWalksRestIsReadFromEachMachinesOwnSend (0.13s)
./internal/inventory --- PASS: TestAStoredBuildWithASilentMergeableFileIsStillReadAndComposed (0.13s)
./internal/inventory --- PASS: TestACredentialIssuedOutsideIsNeverMade (0.11s)
./internal/inventory --- PASS: TestOneAcceptForAProviderIsSealedToEveryConsumer (0.10s)
./internal/inventory --- PASS: TestASharedOwnSecretIssuedOutsideIsNeverMade (0.08s)
./internal/inventory --- PASS: TestAModuleInTheConfigFormIsMirroredWithItsWholeDeclaration (0.10s)
./internal/inventory --- PASS: TestAReportOfABusyContainerIsKeptAndReadBack (0.08s)
./internal/inventory --- PASS: TestANewerBuildsListReplacesTheKeptOneAndAnOlderOneHeardLaterDoesNot (0.08s)
./internal/inventory --- PASS: TestPlacementMovesOutOfTheSettingsLayers (0.39s)
./internal/inventory --- PASS: TestASettingRoutesPlacementBesideTheLayer (0.09s)
./internal/inventory --- PASS: TestTheProvisionerClientsMachineHasAnAccountOfItsOwn (0.13s)
./internal/inventory --- PASS: TestTheFourWordsAreKeptBesideTheLayer (0.09s)
./internal/inventory --- PASS: TestALayerStillHoldingTheWordsReadsThemAsPlacement (0.09s)
./internal/inventory --- PASS: TestTheMoveOfPlacementMovesWhatTheLayersStillHold (0.11s)
./internal/inventory --- PASS: TestTheMoveReadsEveryRowSealedToAMachineAsItIs (0.17s)
./internal/inventory --- PASS: TestASendKeepsThePlansItHandedAndTheMirrorCarriesThem (0.13s)
./internal/inventory --- PASS: TestTheLayersAreReadUntilTheMoveOfConfigHasRun (0.12s)
./internal/inventory --- PASS: TestAModuleReadsMeshConfigOnlyWhereItsValuesAre (0.10s)
./internal/inventory --- PASS: TestTheEndOfTheMoveRefusesALayerChangedSinceItWasRead (0.09s)
./internal/inventory --- PASS: TestACoreCredentialsVaultBoxIsKeptPerMachineAndReplaced (0.08s)
./internal/inventory --- PASS: TestWhatRunsIsTheRegisteredBuildNotANewerOnePutBack (0.13s)
./internal/recordmirror --- PASS: TestNatsAnAssignmentAndARegistrationEachChangeOneKeyAndRaiseOneEvent (3.65s)
./internal/recordmirror --- PASS: TestNatsTheListOfPredefinedKeysKeptChangesTheMirrorsOneKey (1.56s)
**Merge check** at `114c99e0`
Judged: head `114c99e02a52` merged into trunk `611e2275cf7c`; read beside it: mesh-catalog `be9f3de8e64a`, mesh-controller-main `611e2275cf7c`, mesh-host `cd13f7726ef0`, mesh-tools `7412c5b6c9c5`
Siblings read beside it: novox/mesh-catalog#331 `2d1b20364f9b` merged onto `3db85a0dde83` (main)
- `mesh/merge-gate`: **PASS** — every machine composes with the change as it did without (3 of 4 compose) (modules: build-agent, mesh-controller)
- `mesh/repo-check`: **PASS** — its merge-check.sh passed
**Delivery plan** — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step
- tier 0: mesh-controller
- tier 1: build-agent
- ace: receives build-agent
- g14: receives build-agent
- novox: receives mesh-controller, build-agent
- shanks: receives build-agent
- build-agent keeps data (ADR 0233): what it holds is backed up before it moves
- grants step: if this changes what the bus's user list says (a new tool, subject or user), novox is sent that list alone, every build there kept, before build-agent is judged on its first machine
- read by no module's build: internal/catalogue/delivery_seat_test.go
Run by the build seat on shanks as `build-1792156189077327789` (`builds --log build-1792156189077327789`).
```
--- the gate: build-agent, mesh-controller
mesh-controller: ok, 63 tool(s); WARNING: merge-window ask(s) for a setting and do(es) not say whether it is trusted, so it counts as trusted: set at the terminal alone; say "trusted" false where nothing trusts it (novox/hq issue 339); WARNING: controller stay(s) up and say(s) not how it is ready — judged by liveness alone, refused from 2026-11-18 (ADR 0240 rule 8)
long-running resources without health: 1
files asking for a setting without saying whether it is trusted: 1
1 manifest(s) checked. Judged against the seats this binary carries; a claim on one of the mesh's own seats is judged fully at registration, and a seat declared by a module not given here reads as unknown. Identities judged on a 6-character machine name, against the bounds of the providers given here
judging 1 module(s) changed against 4 machine(s), as the snapshot of 2026-10-16T13:00:06Z says they run
composing every machine as the mesh is
the bus's user list leaves out 6 user(s) the mesh has minted no credential for: controller, node.f35, provisioner.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 6 user(s) the mesh has minted no credential for: controller, node.f35, provisioner.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
composing every machine with the change
the bus's user list leaves out 6 user(s) the mesh has minted no credential for: controller, node.f35, provisioner.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 6 user(s) the mesh has minted no credential for: controller, node.f35, provisioner.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
merge gate: PASS — every machine composes with the change as it did without (3 of 4 compose)
judged by controller development build against the facts of 2026-10-16T13:00:06Z
modules the change moves:
- mesh-controller (changed)
machines:
- a machine (f35): does not compose
- holds mesh-dns-resolver (idt): composes
- holds git, holds mesh-artifact-store, holds mesh-broker, holds mesh-catalog, holds mesh-config, holds mesh-delivery, holds mesh-dns-resolver, holds mesh-provisioner, holds mesh-store, holds mesh-vault, holds npm-package-registry, the control node, the hub (ygcyr): composes
- a machine (yvbpsm): composes
a merge would rebuild 2 module(s) in 2 tier(s): build-agent, mesh-controller
notes:
- a machine (f35) does not compose on the mesh today either: mesh-provisioner-client on f35 has no bus credential: nothing was issued for provisioner.f35, and a push would seal a placeholder its process cannot read (ygcyr/hq issue 203). `module issue mesh-provisioner-client --node f35`, then push again
- internal/catalogue/delivery_seat_test.go read by no module's build, and rebuild nothing (issue 280)
--- its merge-check.sh (go toolchain)
ok github.com/novox/mesh-controller/cmd/mesh-builder 1.128s
ok github.com/novox/mesh-controller/examples/objectstore-provisioner 1.018s
ok github.com/novox/mesh-controller/examples/postgres-provisioner 1.030s
ok github.com/novox/mesh-controller/examples/redis-provisioner 1.020s
ok github.com/novox/mesh-controller/examples/route-proxy 1.169s
ok github.com/novox/mesh-controller/internal/artifacts 1.061s
? github.com/novox/mesh-controller/internal/beside [no test files]
ok github.com/novox/mesh-controller/internal/broker 54.605s
ok github.com/novox/mesh-controller/internal/catalogue 21.325s
ok github.com/novox/mesh-controller/internal/conditions 3.746s
ok github.com/novox/mesh-controller/internal/envfile 1.075s
ok github.com/novox/mesh-controller/internal/facts 1.046s
ok github.com/novox/mesh-controller/internal/identity 7.379s
ok github.com/novox/mesh-controller/internal/lease 10.377s
ok github.com/novox/mesh-controller/internal/licences 6.187s
ok github.com/novox/mesh-controller/internal/licences/adapters 1.104s
ok github.com/novox/mesh-controller/internal/lint 4.738s
ok github.com/novox/mesh-controller/internal/outward 1.188s
ok github.com/novox/mesh-controller/internal/overlay 1.126s
ok github.com/novox/mesh-controller/internal/recordmirror 16.000s
ok github.com/novox/mesh-controller/internal/secrets 1.829s
ok github.com/novox/mesh-controller/internal/store 4.668s
ok github.com/novox/mesh-controller/internal/testbus 1.323s
ok github.com/novox/mesh-controller/internal/token 1.080s
ok github.com/novox/mesh-controller/cmd/mesh-controller 43s (shard 1 of 8: 129 tests)
ok github.com/novox/mesh-controller/cmd/mesh-controller 44s (shard 2 of 8: 129 tests)
ok github.com/novox/mesh-controller/cmd/mesh-controller 154s (shard 3 of 8: 128 tests)
ok github.com/novox/mesh-controller/cmd/mesh-controller 76s (shard 4 of 8: 128 tests)
ok github.com/novox/mesh-controller/cmd/mesh-controller 49s (shard 5 of 8: 128 tests)
ok github.com/novox/mesh-controller/cmd/mesh-controller 114s (shard 6 of 8: 128 tests)
ok github.com/novox/mesh-controller/cmd/mesh-controller 91s (shard 7 of 8: 128 tests)
ok github.com/novox/mesh-controller/cmd/mesh-controller 75s (shard 8 of 8: 128 tests)
ok github.com/novox/mesh-controller/internal/inventory 17s (shard 1 of 4: 77 tests)
ok github.com/novox/mesh-controller/internal/inventory 17s (shard 2 of 4: 77 tests)
ok github.com/novox/mesh-controller/internal/inventory 16s (shard 3 of 4: 77 tests)
ok github.com/novox/mesh-controller/internal/inventory 16s (shard 4 of 4: 77 tests)
ok github.com/novox/mesh-controller/internal/builder 16s (shard 1 of 4: 55 tests)
ok github.com/novox/mesh-controller/internal/builder 18s (shard 2 of 4: 55 tests)
ok github.com/novox/mesh-controller/internal/builder 37s (shard 3 of 4: 55 tests)
ok github.com/novox/mesh-controller/internal/builder 39s (shard 4 of 4: 55 tests)
ok github.com/novox/mesh-controller/internal/link 14s (shard 1 of 4: 48 tests)
ok github.com/novox/mesh-controller/internal/link 18s (shard 2 of 4: 48 tests)
ok github.com/novox/mesh-controller/internal/link 16s (shard 3 of 4: 47 tests)
ok github.com/novox/mesh-controller/internal/link 20s (shard 4 of 4: 47 tests)
store tests, each run against the store:
./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeWalksTheOthersAgain (0.29s)
./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeEndsTheMergesThatContainIt (0.36s)
./cmd/mesh-controller --- PASS: TestAStopWalksTheOthersAgainInTheOpenBatch (0.31s)
./cmd/mesh-controller --- PASS: TestAStopNamesWhatStaysOnTheMachinesAndWhatStillCarriesIt (0.27s)
./cmd/mesh-controller --- PASS: TestAStopWithoutAMergeLeavesItOutOfABatch (0.42s)
./cmd/mesh-controller --- PASS: TestSavingPlansAndMovingMergesIsOneAct (0.45s)
./cmd/mesh-controller --- PASS: TestAPlanFollowedFromTheStoreAnswersWhenItMoves (2.05s)
./cmd/mesh-controller --- PASS: TestNodeShowAndStatusReadTheLastSendFromTheStore (1.42s)
./cmd/mesh-controller --- PASS: TestTheConditionsVerbReadsTheLooksTheBucketNoLongerHolds (0.14s)
./cmd/mesh-controller --- PASS: TestAWalkLetGoAndStoppedByVerbsIsSaidStartedAndEnded (0.28s)
./cmd/mesh-controller --- PASS: TestAWalkStoppedOrClosedByAPersonIsSaidEndedStopped (0.27s)
./cmd/mesh-controller --- PASS: TestAWalkRetriedByAPersonIsSaidStartedAgain (0.25s)
./cmd/mesh-controller --- PASS: TestABacklogReleasedByAPersonIsSaidStarted (0.24s)
./cmd/mesh-controller --- PASS: TestAWalkEndedByCancelOrClearIsSaidEnded (0.29s)
./cmd/mesh-controller --- PASS: TestAWalkRestartedByARebuildIsSaidStarted (0.27s)
./cmd/mesh-controller --- PASS: TestAWalkStoppedByHandAndRetriedEndsFailedWhenItFailsAgain (0.29s)
./cmd/mesh-controller --- PASS: TestReplay237 (0.27s)
./cmd/mesh-controller --- PASS: TestAnUnassignThatLeavesItsNodeUnresolvedSaysSoOnceInItsAnswer (0.43s)
./cmd/mesh-controller --- PASS: TestAnUnassignThatLeavesItsNodeResolvedSaysNothingOfIt (0.41s)
./cmd/mesh-controller --- PASS: TestAnAssignThatLeavesItsNodeUnresolvedSaysOnlyThePlansRefusal (0.29s)
./cmd/mesh-controller --- PASS: TestADirectoryOwnersKeyIsRefusedThroughAVerb (0.30s)
./cmd/mesh-controller --- PASS: TestTheSendMakesNoValueForAnOutsideSecretNobodyGave (0.43s)
./cmd/mesh-controller --- PASS: TestAQuestionComposesWithoutAnOutsideSecretNobodyGave (0.40s)
./cmd/mesh-controller --- PASS: TestReplay201 (0.24s)
./cmd/mesh-controller --- PASS: TestARollbackWhoseSendWasRefusedIsCompletedByTheNextSend (0.28s)
./cmd/mesh-controller --- PASS: TestAGateJudgesTheOtherMovesBesideAKeptCore (0.23s)
./cmd/mesh-controller --- PASS: TestReplay401 (0.37s)
./cmd/mesh-controller --- PASS: TestReplay201ThePlansSend (0.29s)
./cmd/mesh-controller --- PASS: TestPlanAndNodeListAnOptionalRequirementLeftUnbound (0.33s)
./cmd/mesh-controller --- PASS: TestReplay340 (0.31s)
./cmd/mesh-controller --- PASS: TestOnlyATrustedFilesNamedKeyIsRefusedThroughAVerb (0.23s)
./cmd/mesh-controller --- PASS: TestReplay349 (0.25s)
./cmd/mesh-controller --- PASS: TestReplay348AFaultFromBeforeTheSendFailsNoGate (0.21s)
./cmd/mesh-controller --- PASS: TestReplay239AModuleNameIsNotTakenOverByAnotherRepository (0.19s)
./cmd/mesh-controller --- PASS: TestAWalkThatMovedNothingSaysWhichModulesMatchedWhatRuns (0.32s)
./cmd/mesh-controller --- PASS: TestAWalkWhoseEveryBuildCameOutTheSameIsDone (0.21s)
./cmd/mesh-controller --- PASS: TestReplay614ANewSDKPlansTheToolchainAndThenItsBundles (0.09s)
./cmd/mesh-controller --- PASS: TestOneAcceptForAProviderIsPlacedForEveryConsumer (0.65s)
./cmd/mesh-controller --- PASS: TestReplay164 (0.35s)
./cmd/mesh-controller --- PASS: TestAnApprovedLayerOpensTheWalkThatSendsIt (0.26s)
./cmd/mesh-controller --- PASS: TestASettingsWalkSendsOneMachineAtATimeEachJudged (0.24s)
./cmd/mesh-controller --- PASS: TestAFailedSettingsWalkStopsAndHoldsNothingBack (0.23s)
./cmd/mesh-controller --- PASS: TestASettingsWalkSendsTheLayerAloneEveryBuildKept (0.23s)
./cmd/mesh-controller --- PASS: TestASettingsWalkStopsBeforeADataMoveAndPassesOverAMachineAway (0.62s)
./cmd/mesh-controller --- PASS: TestACrossingSendSupersedesASettingsGate (0.20s)
./cmd/mesh-controller --- PASS: TestASettingsWalkFailsOnARefusalThatCannotClear (0.21s)
./cmd/mesh-controller --- PASS: TestAProviderElsewhereServesItsOwnComposedName (0.28s)
./cmd/mesh-controller --- PASS: TestAReusedCheckBuildIsRegisteredByItsDigestAndGatedAsABuiltOne (0.52s)
./cmd/mesh-controller --- PASS: TestTheMergeGateJudgesEachManifestAgainstTheListOfTheTree (5.73s)
./cmd/mesh-controller --- PASS: TestRegistrationPublishesTheNewestTrunkListAndJudgesEveryModuleAgainstIt (0.24s)
./cmd/mesh-controller --- PASS: TestADeclarationIsTheSameAfterPlacementMoves (0.42s)
./cmd/mesh-controller --- PASS: TestAReleaseSendsTheRestAtOnceAfterTheFirstPasses (0.31s)
./cmd/mesh-controller --- PASS: TestARestMachineThatFailsIsPutBackAloneAndTheOthersAreJudgedOn (0.27s)
./cmd/mesh-controller --- PASS: TestAWalkTakesOverTheReadingsOfAGateJudgingTheSameBuildThere (0.25s)
./cmd/mesh-controller --- PASS: TestAFirstSendMadeAndNotKeptIsNotSentAgain (0.29s)
./cmd/mesh-controller --- PASS: TestAReleaseSendKeptAndMadeIsNotMadeAgain (0.23s)
./cmd/mesh-controller --- PASS: TestAFirstMachineThatFailsStillStopsTheWalk (0.26s)
./cmd/mesh-controller --- PASS: TestTheControlNodeIsSentLastInAStep (0.26s)
./cmd/mesh-controller --- PASS: TestARestMachineSilentPastItsBoundIsLeftAndSaid (0.31s)
./cmd/mesh-controller --- PASS: TestANoMoveTierWaitsForNoNewReport (0.30s)
./cmd/mesh-controller --- PASS: TestOneProviderDownAndThreeConsumersFailingAreOneCondition (0.21s)
./cmd/mesh-controller --- PASS: TestAConsumerFailingBesideAHealthyProviderIsItsOwn (0.19s)
./cmd/mesh-controller --- PASS: TestTheProvisionerClientsAccountIsIssuedForItsServiceAndNeverInvented (0.22s)
./cmd/mesh-controller --- PASS: TestAcceptOfAnOwnSecretTakesThePathOfItsModulesForm (0.30s)
./cmd/mesh-controller --- PASS: TestAcceptForAProviderTakesThePathOfTheProvidersModule (0.30s)
./cmd/mesh-controller --- PASS: TestAcceptForAMovedTrustedModuleAnnouncesBeforeTheVaultIsAsked (0.29s)
./cmd/mesh-controller --- PASS: TestAcceptForAMovedModuleRecordsAHandActAndNeverTheValue (0.24s)
./cmd/mesh-controller --- PASS: TestAcceptOfAnOutsideOfferTakesThePathOfTheProvidersModule (0.33s)
./cmd/mesh-controller --- PASS: TestAnAskAtTheDeskTakesThePathOfItsModulesForm (0.31s)
./cmd/mesh-controller --- PASS: TestAnIssuedValueTakesThePathOfItsProvidersModule (0.34s)
./cmd/mesh-controller --- PASS: TestARotationTakesThePathOfItsModulesForm (0.27s)
./cmd/mesh-controller --- PASS: TestADeclarationIsTheSameWhileTheWordsAreStillInTheLayers (2.80s)
./cmd/mesh-controller --- PASS: TestADeclarationIsTheSameAfterTheMoveOfPlacement (5.26s)
./cmd/mesh-controller --- PASS: TestTheSendSealsNoSecretOfAModuleHandedThere (0.30s)
./cmd/mesh-controller --- PASS: TestAModulesSecretsAreTheVaultsOnceItIsMarkedMoved (0.19s)
./cmd/mesh-controller --- PASS: TestEveryMachineIsToldTheSameAfterTheMoveOfConfig (26.90s)
./cmd/mesh-controller --- PASS: TestTheMoveOfConfigRefusesWhatWouldChangeAMachine (9.67s)
./cmd/mesh-controller --- PASS: TestTheSettingsVerbForwardsToConfigOnceTheValuesMoved (11.70s)
./cmd/mesh-controller --- PASS: TestTheSendCarriesTheVaultsBoxForACoreCredentialAndKeepsIt (0.42s)
./cmd/mesh-controller --- PASS: TestASilentVaultHoldsTheKeptBoxAndSaysSo (0.36s)
./cmd/mesh-controller --- PASS: TestACoreModuleFirstPlacedWhileTheVaultIsSilentIsSealedByTheController (0.37s)
./cmd/mesh-controller --- PASS: TestAnEngineBelowTheContractIsSentTheControllersSealAsBefore (0.28s)
./cmd/mesh-controller --- PASS: TestModuleIssueHandsACoveredAccountToTheVaultAndOnlyThat (0.34s)
./cmd/mesh-controller --- PASS: TestModuleIssueFailsWhenTheVaultDoesNotTakeACoveredAccount (0.28s)
./cmd/mesh-controller --- PASS: TestModuleIssueBeforeTheVaultIsInstalledKeepsTheValueAndHandsNothing (0.30s)
./cmd/mesh-controller --- PASS: TestARecordedModulesBundleOnlyMoveRollsOutInItsWalk (0.39s)
./cmd/mesh-controller --- PASS: TestARecordedModulesMoveThatRecreatesAContainerWaits (0.71s)
./cmd/mesh-controller --- PASS: TestARecordedModulesMoveThatTouchesDataOrAProviderWaits (0.77s)
./cmd/mesh-controller --- PASS: TestAPersonsRecordAndTheBusHoldEveryMove (0.53s)
./cmd/mesh-controller --- PASS: TestARecordedMoveThatCannotBeJudgedWaits (0.37s)
./cmd/mesh-controller --- PASS: TestReplay867 (4.52s)
./cmd/mesh-controller --- PASS: TestReplay867Recheck (4.46s)
./cmd/mesh-controller --- PASS: TestTheRecheckVerbAsksMeshDeliveryOnABusOfItsOwn (0.40s)
./cmd/mesh-controller --- PASS: TestAGroupsCompositionIntoAReleaseBranchIsJudgedByItsOwnController (4.10s)
./cmd/mesh-controller --- PASS: TestAGroupsCompositionJudgedWithTheValidatorIntoAReleaseBranchIsJudgedByItsOwnController (4.06s)
./internal/inventory --- PASS: TestTheLastSendSaysWhatTheMachineAnswered (0.17s)
./internal/inventory --- PASS: TestAReportIsTheLastSendsAnswerOnlyWhenItIsAboutThatSend (0.17s)
./internal/inventory --- PASS: TestAnIssuedValueIsSealedToEveryHolderOnceAndNotAgain (0.10s)
./internal/inventory --- PASS: TestAnIssuedValueIsSealedAgainAfterAKeyChangeOrAnAcceptance (0.11s)
./internal/inventory --- PASS: TestAConditionsLooksAreKeptBesideTheBucket (0.07s)
./internal/inventory --- PASS: TestAPlanIdHoldingAQuoteIsReadAsAPlainId (0.08s)
./internal/inventory --- PASS: TestAWalksStartIsKeptAndARefusedSaveLeavesItUnsaid (0.15s)
./internal/inventory --- PASS: TestAWalksRestIsReadFromEachMachinesOwnSend (0.13s)
./internal/inventory --- PASS: TestAStoredBuildWithASilentMergeableFileIsStillReadAndComposed (0.13s)
./internal/inventory --- PASS: TestACredentialIssuedOutsideIsNeverMade (0.11s)
./internal/inventory --- PASS: TestOneAcceptForAProviderIsSealedToEveryConsumer (0.10s)
./internal/inventory --- PASS: TestASharedOwnSecretIssuedOutsideIsNeverMade (0.08s)
./internal/inventory --- PASS: TestAModuleInTheConfigFormIsMirroredWithItsWholeDeclaration (0.10s)
./internal/inventory --- PASS: TestAReportOfABusyContainerIsKeptAndReadBack (0.08s)
./internal/inventory --- PASS: TestANewerBuildsListReplacesTheKeptOneAndAnOlderOneHeardLaterDoesNot (0.08s)
./internal/inventory --- PASS: TestPlacementMovesOutOfTheSettingsLayers (0.39s)
./internal/inventory --- PASS: TestASettingRoutesPlacementBesideTheLayer (0.09s)
./internal/inventory --- PASS: TestTheProvisionerClientsMachineHasAnAccountOfItsOwn (0.13s)
./internal/inventory --- PASS: TestTheFourWordsAreKeptBesideTheLayer (0.09s)
./internal/inventory --- PASS: TestALayerStillHoldingTheWordsReadsThemAsPlacement (0.09s)
./internal/inventory --- PASS: TestTheMoveOfPlacementMovesWhatTheLayersStillHold (0.11s)
./internal/inventory --- PASS: TestTheMoveReadsEveryRowSealedToAMachineAsItIs (0.17s)
./internal/inventory --- PASS: TestASendKeepsThePlansItHandedAndTheMirrorCarriesThem (0.13s)
./internal/inventory --- PASS: TestTheLayersAreReadUntilTheMoveOfConfigHasRun (0.12s)
./internal/inventory --- PASS: TestAModuleReadsMeshConfigOnlyWhereItsValuesAre (0.10s)
./internal/inventory --- PASS: TestTheEndOfTheMoveRefusesALayerChangedSinceItWasRead (0.09s)
./internal/inventory --- PASS: TestACoreCredentialsVaultBoxIsKeptPerMachineAndReplaced (0.08s)
./internal/inventory --- PASS: TestWhatRunsIsTheRegisteredBuildNotANewerOnePutBack (0.13s)
./internal/recordmirror --- PASS: TestNatsAnAssignmentAndARegistrationEachChangeOneKeyAndRaiseOneEvent (3.65s)
./internal/recordmirror --- PASS: TestNatsTheListOfPredefinedKeysKeptChangesTheMirrorsOneKey (1.56s)
```
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Issue 913: marking a reviewed pull request ready was two raw forge calls whose order the forge module rejects when reversed, and which the session's permission check refuses as self-approval; the operator merged three approved hq changes by hand.
This declares
mark-ready(id, reviewed-by, why) on the delivery seat, optional until mesh-delivery serves it, so either may deliver first. Groupfeat/913-mark-readywith mesh-catalog (mesh-delivery serves it) and hq (playbooks 07 and 08 name it).Independent review: approved (2 rounds, larger model). Unit tests:
go test ./internal/catalogue/green.Delivery
novox/mesh-controller@114c99e02a52— delivered since 2026-10-16T14:04:16ZDelivery plan — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step
Group
feat/913-mark-ready, in order: novox/hq@7b5f3582be → novox/mesh-controller@114c99e02a → novox/mesh-catalog@2d1b20364fMachines
Transitions
611e2275The commit's note under
refs/notes/mesh-plankeeps every transition:git log --notes=mesh-plan.Merge check at
114c99e0Judged: head
114c99e02a52merged into trunka20680dfe769; read beside it: mesh-catalog8b44967e098e, mesh-controller-maina20680dfe769, mesh-hostcd13f7726ef0, mesh-tools6b3e15042feeSiblings read beside it: novox/mesh-catalog#331
2d1b20364f9bmerged onto3db85a0dde83(main)mesh/merge-gate: PASS — every machine composes with the change as it did without (4 of 4 compose) (modules: build-agent, mesh-controller)mesh/repo-check: FAIL — its merge-check.sh failed: --- FAIL: TestEveryCatalogueManifestParses (1.95s); and TestNoCatalogueManifestNamesAnInstallation, TestEveryCatalogueIdentityFitsWhatItRequires, TestCaTrustRendersTheAuthorityItWasBoundTo, TestTheFilterModuleNeverFlushesTheRuleset, TestTheForgesOwnAddressFollowsThePortTheNodeGaveIt and 6 moreDelivery plan — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step
Run by the build seat on ace as
build-1792154227519080730(builds --log build-1792154227519080730).Merge check at
114c99e0Judged: head
114c99e02a52merged into trunk611e2275cf7c; read beside it: mesh-catalogbe9f3de8e64a, mesh-controller-main611e2275cf7c, mesh-hostcd13f7726ef0, mesh-tools7412c5b6c9c5Siblings read beside it: novox/mesh-catalog#331
2d1b20364f9bmerged onto3db85a0dde83(main)mesh/merge-gate: PASS — every machine composes with the change as it did without (3 of 4 compose) (modules: build-agent, mesh-controller)mesh/repo-check: PASS — its merge-check.sh passedDelivery plan — builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step
Run by the build seat on shanks as
build-1792156189077327789(builds --log build-1792156189077327789).