novox/mesh-controller

Admit a port from the machine's own local network, and never a public subnet (issue 154, ADR 0340) #299

Merged

mesh-admin merged 2 commits from fix/154-local-network into main

2026-10-13 13:07:12 +00:00

Author	SHA1	Message	Date
jochen	4cc8588afb	Test that a global IPv6 subnet is public and never counts as the local network (issue 154, ADR 0340) mesh/merge-gate head 4cc8588afb87 merged into trunk 0a1dc5f93fcb — pass: builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step; every … Details mesh/repo-check head 4cc8588afb87 merged into trunk 0a1dc5f93fcb — pass: its merge-check.sh passed Details mesh/delivery delivered Details mesh/delivery-group group fix/154-local-network delivered: every member is delivered Details The review asked for the IPv6 side of the rule that local-network cannot open a port to the internet.	2026-10-13 13:20:50 +02:00
jochen	6e6cd5e26d	Admit a port from the machine's own local network, and never a public subnet (issue 154, ADR 0340) mesh/delivery-group group fix/154-local-network checking: 0 of 2 member(s) ready Details mesh/merge-gate out of date: judged against trunk 1826b68a22b5, the trunk is now 404b4409e70e; judged again on a recheck or when it is merged Details mesh/repo-check out of date: judged against trunk 1826b68a22b5, the trunk is now 404b4409e70e; judged again on a recheck or when it is merged Details mesh/delivery superseded: a newer head of the same pull request Details A local service could only be declared public, which says the internet. local-network is a source and a reach: the private network and the private networks the machine reported on a link facing outside, judged here, shown by plan and node, and said in the rule set when there are none.	2026-10-13 11:20:22 +02:00