jschoubben 1fd6194ff8 The control plane pins the bus's certificate, and keeps its password out of errors ...

The bus presents the mesh's own certificate, which names nothing a public verifier
accepts; the client verified by name and failed against a bus that was answering
("certificate is not valid for any names", 2026-09-28). It now pins the leaf's
fingerprint from MESH_BROKER_CERTIFICATE, as every host does. And a connection
error named the whole URL, password included — the address alone now.

2026-09-28 01:35:20 +02:00

..

testdata

Only CONSUMER.INFO was missing from a machine's grants; the rest was already there

2026-09-28 01:17:40 +02:00

agreement_catalogue_test.go

Merge main: the trunk renamed the seats and made them data

2026-09-27 18:50:18 +02:00

agreement_test.go

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

agreement.go

Event names are checked now, per manifest and across the catalogue

2026-09-27 14:43:16 +02:00

broker_test.go

An address is read from the node's settings where it is used, never recorded with a port

2026-09-23 23:49:31 +02:00

broker.go

An address is read from the node's settings where it is used, never recorded with a port

2026-09-23 23:49:31 +02:00

derived_test.go

A node's declaration consumer, which only the mesh can make

2026-09-27 01:24:46 +02:00

derived.go

A module may watch a role's events, and the catch-up turns out to be unnecessary

2026-09-27 17:22:30 +02:00

genesis_template_test.go

Genesis can raise a mesh on the new bus, and the carried user list is checked against the composer

2026-09-27 16:39:19 +02:00

jetstream_test.go

Derive a seat's stream and a module's consumer, and wire JetStream

2026-09-26 22:28:42 +02:00

jetstream.go

The control plane pins the bus's certificate, and keeps its password out of errors

2026-09-28 01:35:20 +02:00

management.go

An address is read from the node's settings where it is used, never recorded with a port

2026-09-23 23:49:31 +02:00

module_account_test.go

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

nats_golden_test.go

The enrolment user is per token, and it has an inbox

2026-09-27 01:31:34 +02:00

nats_test.go

The controller could not answer an enrolment, and a probe on an open server said it could

2026-09-27 14:13:52 +02:00

nats.go

Only CONSUMER.INFO was missing from a machine's grants; the rest was already there

2026-09-28 01:17:40 +02:00

onnats_test.go

Genesis can raise a mesh on the new bus, and the carried user list is checked against the composer

2026-09-27 16:39:19 +02:00

onnats.go

rollout check: whether this mesh could move its bus, and what is missing

2026-09-27 17:59:01 +02:00

raise_live_test.go

A module may watch a role's events, and the catch-up turns out to be unnecessary

2026-09-27 17:22:30 +02:00

raise.go

The bus's objects are raised on every start, and one switch says which bus

2026-09-27 02:59:05 +02:00

readiness_test.go

The move ends with the old broker going, not staying

2026-09-27 23:04:59 +02:00

readiness.go

The move ends with the old broker going, not staying

2026-09-27 23:04:59 +02:00

streams_test.go

The mesh's own roles carry a protocol, and the build branch retires

2026-09-27 15:34:44 +02:00

streams.go

A build is work submitted to a role, on both buses

2026-09-27 16:01:53 +02:00

users_test.go

The user list is composed before anything moves onto the bus

2026-09-27 17:33:52 +02:00

users.go

A module may watch a role's events, and the catch-up turns out to be unnecessary

2026-09-27 17:22:30 +02:00