jochen 01c5ab2aab Hold every kept archive by a manifest so the store's collector keeps it (hq issue 253) ...

The store's garbage-collect marks only from manifests, and archives were
published as bare blobs, so the first real collection would delete every
archive the mesh keeps. PublishArchive now puts a deterministic OCI holder
manifest (empty config, one layer) beside each archive; the sweep holds every
kept archive before it lets anything go, which backfills existing bare blobs,
and lets go of an archive holder-first. A forgotten module no longer keeps its
five recent builds (ADR 0189). `collection [--json]` reports kept archives
held/unheld and what may be let go, so the dry run can be lifted on evidence.

2026-10-05 18:13:23 +02:00

..

acts_test.go

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

acts.go

A contribution depends on the seat that receives it, and a collision is refused at assign (hq ADR 0210, issue 235)

2026-10-04 15:45:35 +02:00

addresses_test.go

Run the controller as a Go bundle the host starts as a process (hq issue 213)

2026-10-04 01:45:25 +02:00

adopting_test.go

The mesh says what filters a converged machine: filters kept per node, shown by node show, named by status, and previewed with their fates (hq ADR 0168)

2026-10-02 12:00:12 +02:00

adoption.go

node show cites ADR 0180 for a removed front end (hq ADR 0186)

2026-10-02 18:42:16 +02:00

api_test.go

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

api.go

A module depends on the node seats that apply its resources (hq ADR 0207)

2026-10-04 12:34:11 +02:00

ask.go

One bus: the AMQP transport is gone from the controller

2026-09-28 03:36:16 +02:00

board_test.go

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

board.go

Record whether a node is adopted and which modules were taken on it (hq ADR 0100)

2026-09-22 17:14:05 +02:00

build_seat_test.go

The controller asks the build role that has a holder, and hears both roles' outcomes (hq ADR 0190, the handover)

2026-10-03 02:51:03 +02:00

build_test.go

An older build request never replaces a newer one's artifact

2026-10-04 00:22:11 +02:00

build.go

Take no dry run in: mark it on the request, echo it on the outcome, set it aside

2026-10-05 09:50:20 +02:00

buscertificate_test.go

The mesh makes the bus's certificate itself

2026-09-29 15:42:51 +02:00

buscertificate.go

A token is an account on the bus, and genesis can place the list

2026-09-29 17:36:50 +02:00

check_test.go

A setting reaches only what declares it, the mesh places its own files, registration refuses a name

2026-09-30 22:29:28 +02:00

check.go

Module state is hq ADR 0201 after all: the derived-value record moved to 0202 on hq main

2026-10-04 11:02:42 +02:00

collect.go

Hold every kept archive by a manifest so the store's collector keeps it (hq issue 253)

2026-10-05 18:13:23 +02:00

collection.go

Hold every kept archive by a manifest so the store's collector keeps it (hq issue 253)

2026-10-05 18:13:23 +02:00

credential_on_assign_test.go

An assignment issues its bus credential, a push refuses one nobody issued, and what reads a secret restarts on it (hq issue 203)

2026-10-03 04:01:17 +02:00

dependents_test.go

A merge of a base rebuilds what stands on it

2026-10-01 16:09:26 +02:00

dry_run_test.go

Take no dry run in: mark it on the request, echo it on the outcome, set it aside

2026-10-05 09:50:20 +02:00

hold_test.go

Give a cascade round's hold back on every return, a body that cannot be marshalled included (hq ADR 0100)

2026-09-22 18:31:00 +02:00

hold.go

Hold a node from composing to sending, so a push composed before converge or adopt is never sent after it (hq ADR 0100)

2026-09-22 18:10:04 +02:00

holdings_test.go

A holder by derivation is recorded before an assignment can unsettle it (hq 170)

2026-09-30 14:39:59 +02:00

holdings.go

A holder by derivation is recorded before an assignment can unsettle it (hq 170)

2026-09-30 14:39:59 +02:00

hosts_behind_test.go

A commit has no order, so the mesh says who runs what and claims no newer

2026-09-30 09:28:56 +02:00

issue_204_test.go

A declaration is numbered when it is composed, and a send is recorded even by a sender being replaced (hq issue 204)

2026-10-03 04:02:36 +02:00

licence.go

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

main.go

Hold every kept archive by a manifest so the store's collector keeps it (hq issue 253)

2026-10-05 18:13:23 +02:00

mesh_for_test.go

A repeat assignment says nothing changed (ADR 0115)

2026-09-26 19:02:35 +02:00

modules_test.go

A module's own secret rotates when its definition says the module reads it at start (hq 180)

2026-10-01 11:41:49 +02:00

modules.go

A module depends on the node seats that apply its resources (hq ADR 0207)

2026-10-04 12:34:11 +02:00

network_test.go

The mesh's one resolver: its seat, a provider's address, zones, and a node's hosts file (hq ADR 0194, 0196, 0199)

2026-10-04 17:32:08 +02:00

network.go

A machine the network filter drops is said, not skipped in silence (hq issue 188)

2026-10-01 18:14:34 +02:00

nodes_test.go

Refuse token issue --adopted for a converged node and point to adopt, rather than flip it quietly (hq ADR 0100)

2026-09-22 18:03:45 +02:00

nodes.go

Name the issue the event consumer fix answers: 248

2026-10-05 17:15:49 +02:00

operator.go

Work slower than the window says so, and one address is the bus's

2026-09-28 09:51:50 +02:00

order_test.go

A commit is never a branch to follow (hq issue 215)

2026-10-03 22:22:08 +02:00

plan_test.go

review: hold the hosts region through composition, and say so in plan

2026-09-27 00:05:41 +02:00

plan.go

The mesh's one resolver: its seat, a provider's address, zones, and a node's hosts file (hq ADR 0194, 0196, 0199)

2026-10-04 17:32:08 +02:00

plans_one_at_a_time_test.go

Let two controllers overlap safely while one hands over to the other (hq issue 213)

2026-10-04 01:11:26 +02:00

push_test.go

A declaration is numbered when it is composed, and a send is recorded even by a sender being replaced (hq issue 204)

2026-10-03 04:02:36 +02:00

push.go

Compose a bus user only for a module that can read an account

2026-10-04 17:32:50 +02:00

readable_test.go

The mesh says what filters a converged machine: filters kept per node, shown by node show, named by status, and previewed with their fates (hq ADR 0168)

2026-10-02 12:00:12 +02:00

readable.go

A module depends on the node seats that apply its resources (hq ADR 0207)

2026-10-04 12:34:11 +02:00

references.go

An address is read from the node's settings where it is used, never recorded with a port

2026-09-23 23:49:31 +02:00

release_plan_test.go

An older build request never replaces a newer one's artifact

2026-10-04 00:22:11 +02:00

release_plan.go

Let two controllers overlap safely while one hands over to the other (hq issue 213)

2026-10-04 01:11:26 +02:00

rollout_test.go

Merge main: the trunk renamed the seats and made them data

2026-09-27 18:50:18 +02:00

rollout.go

One runtime principal per node carries every assigned module's tools (hq ADR 0175, to-be 38 WP2.1)

2026-10-02 18:16:14 +02:00

roster_failure_test.go

The roster is the machines: each node's internal domain covers its routes (hq ADR 0191)

2026-10-03 16:10:16 +02:00

rotate.go

A module may hold several secrets from one provider, each a pair of its own

2026-09-21 20:28:16 +02:00

seat_dependencies_test.go

Refuse an unmet seat dependency the catalogue could meet (hq ADR 0207 §4)

2026-10-04 13:07:45 +02:00

seats_test.go

Name system seats by scope; let a module define its own (ADR 0121)

2026-09-27 14:30:56 +02:00

seats.go

The first handover records the standing holder without re-judging it

2026-09-27 23:34:40 +02:00

seatverbs_test.go

A bundle stands on the toolchain it is compiled in (hq issue 211)

2026-10-03 22:18:20 +02:00

seatverbs.go

Hold every kept archive by a manifest so the store's collector keeps it (hq issue 253)

2026-10-05 18:13:23 +02:00

secret_test.go

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

secret.go

A provider with one credential shares it with every consumer, remade for all at once (hq ADR 0158)

2026-10-01 12:26:44 +02:00

sendable_test.go

A take acts on the preview it showed; a setting is judged where it is stored; a kept network and a minted secret are said (hq ADR 0163)

2026-10-02 11:01:09 +02:00

sendable.go

A take acts on the preview it showed; a setting is judged where it is stored; a kept network and a minted secret are said (hq ADR 0163)

2026-10-02 11:01:09 +02:00

sequence_test.go

Each send is numbered, inside the signed bytes

2026-09-30 14:09:12 +02:00

source_test.go

Rename the mesh's seats to mesh-*, keeping their interfaces

2026-09-26 23:07:09 +02:00

source.go

A definition names no installation: the check, an operator's value, a context on the git seat

2026-09-30 18:38:06 +02:00

status_test.go

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

status.go

A module depends on the node seats that apply its resources (hq ADR 0207)

2026-10-04 12:34:11 +02:00

stores.go

Seats keep their former names, so a rename breaks nothing (ADR 0122, phase 2)

2026-09-27 16:32:22 +02:00

take_preview_test.go

A take acts on the preview it showed; a setting is judged where it is stored; a kept network and a minted secret are said (hq ADR 0163)

2026-10-02 11:01:09 +02:00

unheld_report_test.go

An act says the unmet seat dependencies of the node it acted on, not the mesh's (hq ADR 0207)

2026-10-04 12:50:25 +02:00

untaken_test.go

A held module is in status, and it stops the mesh reading as well

2026-09-30 08:46:20 +02:00

upgrades.go

Let two controllers overlap safely while one hands over to the other (hq issue 213)

2026-10-04 01:11:26 +02:00

well_scope_test.go

The all-well sentence says what it is not a claim about

2026-09-30 08:58:59 +02:00

worker_order_test.go

The build seat's holder follows the controller that defines its worker (hq issue 206)

2026-10-03 04:04:41 +02:00