mesh-adminandClaude Opus 5.5 0214b45469 Run mesh-lab's replays where no pull request reaches ...

The replays hold the container runtime's socket, yet took their HOME, Go
environment, build cache and module cache from the workspace a pull request's
own script writes, so a planted -toolexec hook ran as root on the build node
(hq issue 709). They now run from a copy of mesh-lab made before anything of
the change runs, with a fresh home and the judge cache's caches, as a judge is
built (ADR 0358 §6).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-14 14:15:19 +00:00

..

artifacts

Build a change once: the check builds what its merge moves, the walk takes it by key

2026-10-13 23:04:40 +02:00

beside

Judge the SDK conformance fixtures against the SDK the controller pins, never a desktop's checkout (issue 449)

2026-10-11 04:19:01 +02:00

broker

Raise every bus user's slow consumer and closed connection as S9, from the bus module's events (hq issue 270, ADR 0357)

2026-10-14 08:41:47 +02:00

builder

Run mesh-lab's replays where no pull request reaches

2026-10-14 14:15:19 +00:00

catalogue

Raise every bus user's slow consumer and closed connection as S9, from the bus module's events (hq issue 270, ADR 0357)

2026-10-14 08:41:47 +02:00

conditions

Keep a condition's looks in the store, so a look that changes nothing writes no bucket (issue 420)

2026-10-12 12:11:13 +02:00

envfile

An address is read from the node's settings where it is used, never recorded with a port

2026-09-23 23:49:31 +02:00

facts

Move a module on a merge only when its build source holds a changed file (hq ADR 0267, issue 363)

2026-10-10 03:20:36 +02:00

identity

Copy each store test's database from a template migrated once, and hash test bus passwords at bcrypt's least cost

2026-10-12 23:53:06 +02:00

inventory

Build for the merge from a copy its tests never touch, and keep or take only the same head's build

2026-10-14 09:56:23 +02:00

lease

Give a fast-renewing test lease a serving controller's time to renew, and prove the minted hash's cost

2026-10-13 00:08:48 +02:00

licences

Copy each store test's database from a template migrated once, and hash test bus passwords at bcrypt's least cost

2026-10-12 23:53:06 +02:00

link

Say which validator judged a release-branch check, and prove clause 5

2026-10-14 12:56:55 +00:00

lint

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

outward

A settings proposal reads at a glance, its values whole where the sender is proven (issues 383 and 639)

2026-10-13 20:45:25 +02:00

overlay

Retire the networking bundle and what the control plane stops shipping (hq ADR 0226)

2026-10-06 14:59:28 +02:00

secrets

A provider with one credential shares it with every consumer, remade for all at once (hq ADR 0158)

2026-10-01 12:26:44 +02:00

store

Copy each store test's database from a template migrated once, and hash test bus passwords at bcrypt's least cost

2026-10-12 23:53:06 +02:00

testbus

Judge tests that read another repository against what the check clones, never the desktop's checkout (issue 432)

2026-10-11 02:55:04 +02:00

token

A token can be issued for a machine's tunnel key, and it joins through the tunnel

2026-10-08 02:06:19 +02:00