novox/mesh-controller
13
0
Fork 0
Code Issues Pull Requests 3 Releases Wiki Activity

A module's process may hold a bus account of its own, and a module stream may be a work queue (ADR 0436, issues 1170, 1177-1181) #390

Merged
mesh-tools merged 14 commits from feat/mail-sender-controller into main 2026-10-19 02:07:52 +00:00
Conversation 3 Commits 14 Files Changed 30
+6 -4
1 changed files with 6 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit cfb6a8c531 - Show all commits
internal/catalogue/own_secret_owner_test.go
+6 -4
View File
@@ -58,10 +58,12 @@ func TestAnOwnSecretsOwnerIsGivenToItsFiles(t *testing.T) {
if got := family["owner"]; got != "mesh-mail-send" {
t.Fatalf("the family member's owner: %v; want mesh-mail-send", got)
}
if got := family["mode"]; got != "" && got != nil {
// mode is not set by ownedBy; the host applies 0600 to every secret file regardless (ADR 0086). Still,
// a mode this test sees must not have been changed by the owner clause.
t.Logf("family mode: %v", got)
// review round 1, finding 7: asserted, not merely logged. ownedBy never sets "mode", so a sealed secret
// file carries none here either — the host applies 0600 to every one regardless (novox/hq ADR 0086) —
// and the owner clause must not have added one of its own that could override that.
if _, has := family["mode"]; has {
t.Fatalf("the family member carries its own mode %v; the owner clause must not set one, so the "+
"host's 0600 for every sealed secret file stands", family["mode"])
}
if plain == nil {
t.Fatalf("the module's other own secret was not composed at all: %v", out)