The controller takes the indexer's verdict instead of judging manifests; route-proxy declares its credential form (ADR 0578, 0579) #489

Merged

mesh-tools merged 9 commits from feat/judge-once into main 2026-11-01 07:54:24 +00:00

Conversation 5 Commits 9 Files Changed 57

+250 -1145

9 Commits

Author	SHA1	Message	Date
jschoubben	b564c315d0	Test the controller as one that judges no manifest, and reset the new-module waits each test leaves (ADR 0578) ... Issue 1585: registration publishes the predefined list and judges nothing against it; a definition naming an installation is the indexer's judge's to refuse; a word the controller does not read is set aside and the module registered (0578 §6 changes 0501 §7); a refused verdict holds the module and names it. The process-wide list of new modules waiting is emptied at each take-in test's start and end, so no test reads another's. Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL	2026-11-01 04:14:44 +01:00
jschoubben	5bd03b3984	Refuse a send that would seal a placeholder for a bus credential nobody issued (issue 203) ... mesh-sdk #141 (issue 774) stands an unissued bus account in, in the Foreseeing mode, so a proposal's answer can be asked before the vault mints it; the controller's send then took the stand-in for an own secret to make and would seal a random value where the broker credential belongs. The send and the question refuse it now, in the words the composition used to: module issue, then push. Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL	2026-11-01 04:14:44 +01:00
jschoubben	e02fcad739	Pin the group's mesh-sdk head after the gofmt fix ... Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL	2026-11-01 03:27:07 +01:00
jschoubben	4a92ec6102	Pin mesh-sdk at the head after review round 1 ... Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL	2026-11-01 03:13:17 +01:00
jschoubben	909cc25169	Pin mesh-sdk at the judge-less release head in the controller and route-proxy ... Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL	2026-11-01 02:46:24 +01:00
jschoubben	272d5ebd61	Declare credential form none for the provision, which hands consumers no credential ... The manifest judge refuses an offer that says no credential form (issue 1585). Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL	2026-11-01 02:43:24 +01:00
jschoubben	a6386ff23a	Decode manifests in tests and pin the mesh-sdk that no longer holds the judge ... Issue 1585, S18/S19: the judge's tests live in mesh-delivery now, so an assertion that only tested judging goes and every test that builds a manifest decodes it. Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL	2026-11-01 02:40:39 +01:00
jschoubben	b51105908a	Stop judging manifests at registration; the controller registers what the indexer accepted ... Issue 1585, S18 (ADR 0578 §3): registerJudged no longer re-judges the manifest or its predefined keys, and a standing build is read leniently; module add decodes and judges nothing. Resolve never re-parsed a manifest, so a key-key fallback needs no list there; a table row holds that. Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL	2026-11-01 02:09:13 +01:00
jschoubben	8b4d536a11	Take the indexer's verdict on a manifest instead of judging it in the controller ... Issue 1585, S18 (ADR 0578 §3, §6): a done key's manifest is decoded leniently and the verdict read from the indexer's state; a refused one is held and named, an unread word set aside and named, never a wait. The module check command, which judged files with no mesh and which nothing calls any more, goes with its tests. Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL	2026-11-01 02:07:44 +01:00