jochen fcfbf7e69e Name the account agents run as on a node, and say whether it can become root ...

On the control node every agent ran as the operator's account, which has
passwordless sudo, so an agent could become root without a person (hq ADR
0266). A node now names an agent account at the controller's terminal only;
the agent's module declares it never to become root, the node-engine judges
that, and the self-check (DA) raises agent-can-become-root while it does not
hold, so ADR 0259's router can rest on it.

2026-10-09 10:11:21 +02:00

..

advisories_test.go

Keep what a consumer gives up on until a person delivers it again or drops it

2026-10-08 18:32:58 +02:00

advisories.go

Keep what a consumer gives up on until a person delivers it again or drops it

2026-10-08 18:32:58 +02:00

announce.go

A bundle stands on the toolchain it is compiled in (hq issue 211)

2026-10-03 22:18:20 +02:00

ask.go

One bus: the AMQP transport is gone from the controller

2026-09-28 03:36:16 +02:00

build_seat_test.go

A build machine serves the seat its credential claims (hq ADR 0190, the handover)

2026-10-03 02:47:49 +02:00

build.go

Record the bases a build copies, keep them by the builds that stood on them, and copy each image once

2026-10-08 15:47:42 +02:00

builds_current_test.go

The build role is the node-scoped seat node-build-agent, and its work is shared by every holder (hq ADR 0190)

2026-10-02 22:31:55 +02:00

builds_nats_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

builds_nats.go

Serve the read verbs on the serving controller's own connection, and name every connection

2026-10-08 21:08:34 +02:00

builds.go

The controller asks the build role that has a holder, and hears both roles' outcomes (hq ADR 0190, the handover)

2026-10-03 02:51:03 +02:00

bus_nats.go

Deliver a dead letter again only where it is received, and never stop serving for the notices

2026-10-08 18:32:58 +02:00

bus_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

bus.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

calls_kept_test.go

Keep calls and hand acts on the bus, answer status at once, record durations (hq to-be 45 Phase 0)

2026-10-06 02:59:36 +02:00

calls_kept.go

Keep calls and hand acts on the bus, answer status at once, record durations (hq to-be 45 Phase 0)

2026-10-06 02:59:36 +02:00

calls_test.go

Answer a panicking verb with an error, say flag errors in the answer, and leave refused logins out of D15

2026-10-08 21:08:34 +02:00

calls.go

Answer a panicking verb with an error, say flag errors in the answer, and leave refused logins out of D15

2026-10-08 21:08:34 +02:00

conformance_test.go

Hold the Go emitter to the shared fixtures

2026-09-26 23:40:59 +02:00

contracts_test.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

contracts.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

deadletters_test.go

Deliver a dead letter again only where it is received, and never stop serving for the notices

2026-10-08 18:32:58 +02:00

deadletters.go

Deliver a dead letter again only where it is received, and never stop serving for the notices

2026-10-08 18:32:58 +02:00

declare.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

enrol_bus_credential_test.go

1.7 finished: minting, the file delivered, and a test flake I caused

2026-09-27 03:19:41 +02:00

enrol_claim_test.go

Review of 083: finishing an enrolment whose token was spent takes proof of the key's private half, a live lease and a first delivery — a public key alone cannot replay a spent token; shutdown leaves held messages for the broker; identical builds supersede; what is held leaves room in the prefetch

2026-09-22 14:33:13 +02:00

enrol_proof_test.go

The enrolment proof's message has a known answer, repeated in the host's test

2026-09-22 14:33:33 +02:00

enrol_reply_probe_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

enrol_shape_test.go

A module may hold several secrets from one provider, each a pair of its own

2026-09-21 20:28:16 +02:00

enrol_tunnel_key_test.go

A token can be issued for a machine's tunnel key, and it joins through the tunnel

2026-10-08 02:06:19 +02:00

enrolment.go

A token can be issued for a machine's tunnel key, and it joins through the tunnel

2026-10-08 02:06:19 +02:00

events.go

Let a walk wait for its delivery's word, and serve the delivery's owner (hq ADR 0239)

2026-10-07 00:01:42 +02:00

handacts_test.go

Keep calls and hand acts on the bus, answer status at once, record durations (hq to-be 45 Phase 0)

2026-10-06 02:59:36 +02:00

handacts.go

Record a push that only moves recorded builds as the person's word, not a repair (hq issue 301)

2026-10-08 00:12:23 +02:00

health_test.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

health.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

heard_order_test.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

heard_test.go

Keep the account of the sent declaration over an older one (hq issue 267)

2026-10-06 01:45:35 +02:00

merges.go

Catch up on merges the bus announced and never handed over (hq issue 266)

2026-10-06 01:29:21 +02:00

order_test.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

order.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

pages_test.go

Page an answer larger than one message of the bus, and keep overviews brief (hq issue 314)

2026-10-08 12:19:16 +02:00

pages.go

Page an answer larger than one message of the bus, and keep overviews brief (hq issue 314)

2026-10-08 12:19:16 +02:00

profile_report_test.go

The vault's seat, and a report that carries the machine's profile (hq ADR 0161)

2026-10-01 15:58:04 +02:00

protocol_test.go

Hold the network statement's field names on the controller's side (hq ADR 0241)

2026-10-07 18:53:21 +02:00

protocol.go

Name the account agents run as on a node, and say whether it can become root

2026-10-09 10:11:21 +02:00

queue_test.go

Keep a replay from moving the mesh backwards, and tighten the queue's edges (review of hq ADR 0219)

2026-10-05 19:45:45 +02:00

queue.go

Page an answer larger than one message of the bus, and keep overviews brief (hq issue 314)

2026-10-08 12:19:16 +02:00

receive_fake_test.go

Report a provider that keeps failing a consumer in status (hq ADR 0224)

2026-10-06 00:13:23 +02:00

receive_nats_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

receive_nats.go

Deliver a dead letter again only where it is received, and never stop serving for the notices

2026-10-08 18:32:58 +02:00

receive.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

rekey_test.go

The mesh says what it applied, and the replay has an address it may use

2026-09-28 16:07:18 +02:00

replay314_test.go

Page an answer larger than one message of the bus, and keep overviews brief (hq issue 314)

2026-10-08 12:19:16 +02:00

replay330_test.go

Keep what a consumer gives up on until a person delivers it again or drops it

2026-10-08 18:32:58 +02:00

report_retry_test.go

The mesh says what it applied, and the replay has an address it may use

2026-09-28 16:07:18 +02:00

retirement.go

Derive data protection from a module's declared data (hq ADR 0233)

2026-10-06 16:47:49 +02:00

seattools.go

Page an answer larger than one message of the bus, and keep overviews brief (hq issue 314)

2026-10-08 12:19:16 +02:00

serve.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

stale_report_test.go

The mesh says what it applied, and the replay has an address it may use

2026-09-28 16:07:18 +02:00

standby_nats_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

standing_test.go

Hear what providers retire, and let a person approve, reject and delete (hq ADR 0230)

2026-10-06 14:41:15 +02:00

standing.go

Hear what providers retire, and let a person approve, reject and delete (hq ADR 0230)

2026-10-06 14:41:15 +02:00

store_window_test.go

One bus: the AMQP transport is gone from the controller

2026-09-28 03:36:16 +02:00

watched.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

window_test.go

The store window as a decision, and the problem moving it to the server

2026-09-27 00:05:52 +02:00

window.go

The consume side behind a seam, and the window wiring into the loop

2026-09-27 00:44:16 +02:00