Broker: the bus node may follow the grants part's sealed user list and the grants part may write it, the operator's second one-grant exception (issue 1945) #470

2026-10-26T12:18:46Z

mesh-tools commented

2026-10-26 12:18:46 +00:00

Group feat/1945-user-list-switch, one Approve. The controller is frozen; this is the second grant exception the operator allowed (2026-10-26 13:0x, after 'just deliver it'): before take-over the bus loads the controller's list, so the first list from the grants part can only reach the bus through a list that already grants node. the read of mesh-grants' key user-list.sealed and its object bucket by name, and mesh-grants the write of that bucket. Nothing else changes: the composed lists on mesh-sdk's fixtures differ only by these subjects (golden before/after, review-switch@shanks). Its delivery restarts the controller on novox, which also grants new states waiting since today (issue 1790 note 13).

Also fixed here, on the operator's word (13:2x, 'maybe you can also fix it while still releasing it'): TestTheDeclarationsStreamGoesOnceEveryNodeRunsTheNewEngine failed on main too since #465 (take-in registers on the fingerprint): the test's indexer stand-in answered the trunk value for every commit, so mesh-host registered at an older commit looked already at the trunk and no build was recorded. The stand-in now answers only at the trunk's commit, as the real indexer does (test file only, controller code unchanged). Fails before, passes after (local run against the test store).

Reviewed-by: lead-47@shanks at 779533764b

Group feat/1945-user-list-switch, one Approve. The controller is frozen; this is the second grant exception the operator allowed (2026-10-26 13:0x, after 'just deliver it'): before take-over the bus loads the controller's list, so the first list from the grants part can only reach the bus through a list that already grants node.<bus node> the read of mesh-grants' key user-list.sealed and its object bucket by name, and mesh-grants the write of that bucket. Nothing else changes: the composed lists on mesh-sdk's fixtures differ only by these subjects (golden before/after, review-switch@shanks). Its delivery restarts the controller on novox, which also grants new states waiting since today (issue 1790 note 13). Also fixed here, on the operator's word (13:2x, 'maybe you can also fix it while still releasing it'): TestTheDeclarationsStreamGoesOnceEveryNodeRunsTheNewEngine failed on main too since #465 (take-in registers on the fingerprint): the test's indexer stand-in answered the trunk value for every commit, so mesh-host registered at an older commit looked already at the trunk and no build was recorded. The stand-in now answers only at the trunk's commit, as the real indexer does (test file only, controller code unchanged). Fails before, passes after (local run against the test store). Reviewed-by: lead-47@shanks at 779533764bc0b1e8704566f9aa99a9e7564ac2ef

mesh-tools added 1 commit 2026-10-26 12:18:46 +00:00

Broker: the bus node may follow the grants part's sealed user list and the grants part may write it, the operator's second one-grant exception (issue 1945, ADR 0547 clauses 7-8)

mesh/delivery merged: source.main moved to novox/mesh-controller@350f8ebdfe5f

Details

mesh/delivery-group group feat/1945-user-list-switch merged: every member is merged

Details

mesh/check checking 09d2cc5056ef on 47e64f0284a9 | novox/mesh-controller#470 in group feat/1945-user-list-switch

09d2cc5056

mesh-tools commented

2026-10-26 12:18:52 +00:00

Delivery novox/mesh-controller@09d2cc5056ef — merged since 2026-10-26T12:21:45Z

Source — source.main moved to novox/mesh-controller@350f8ebdfe. Whether it reached the machines is mesh-delivery-view's, derived from source.main, the wants and the haves.

Group feat/1945-user-list-switch: novox/mesh-catalog@c9414b1c98, novox/mesh-controller@09d2cc5056, novox/mesh-delivery@5c76c9d3ac, novox/mesh-host@e88ddab241, novox/mesh-sdk@c2a410bb63

Transitions

2026-10-26 12:18 (new) → proposed (announced): novox/mesh-controller#470's head announced
2026-10-26 12:18 proposed → ready (accepted): a verdict names this commit and the trunk's head as its trunk commit, the gate passed or warned, and the repository's own check did not fail; or the check gates no merge (check-gates-merge false)
2026-10-26 12:21 ready → merged (merged): on the trunk its modules follow: merged there

The commit's note under refs/notes/mesh-plan keeps every transition of this change up to its merge: git log --notes=mesh-plan.

**Delivery** `novox/mesh-controller@09d2cc5056ef` — **merged** since 2026-10-26T12:21:45Z **Source** — source.main moved to novox/mesh-controller@350f8ebdfe5f. Whether it reached the machines is `mesh-delivery-view`'s, derived from `source.main`, the wants and the haves. **Group** `feat/1945-user-list-switch`: novox/mesh-catalog@c9414b1c9856, novox/mesh-controller@09d2cc5056ef, novox/mesh-delivery@5c76c9d3ac84, novox/mesh-host@e88ddab24170, novox/mesh-sdk@c2a410bb6376 **Transitions** - 2026-10-26 12:18 (new) → proposed (announced): novox/mesh-controller#470's head announced - 2026-10-26 12:18 proposed → ready (accepted): a verdict names this commit and the trunk's head as its trunk commit, the gate passed or warned, and the repository's own check did not fail; or the check gates no merge (check-gates-merge false) - 2026-10-26 12:21 ready → merged (merged): on the trunk its modules follow: merged there The commit's note under `refs/notes/mesh-plan` keeps every transition of this change up to its merge: `git log --notes=mesh-plan`.

mesh-tools merged commit 350f8ebdfe into main

2026-10-26 12:21:45 +00:00

mesh-tools deleted branch feat/1945-user-list-switch

2026-10-26 12:21:45 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: novox/mesh-controller#470