This repository has been archived on 2026-11-02. You can view files and clone it. You cannot open issues or pull requests or push a commit.

jochen e8386b73ef Keep a join token nowhere but in its caller's answer ...

The calls the controller serves are kept on the bus with their answers,
and calls answers anyone who may call its seat. A token is the one-time
right to become a machine of the mesh, so the token verb's answer is kept
as withheld (novox/hq ADR 0169).

2026-10-08 01:46:34 +02:00

..

advisories_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

advisories.go

Grant the self-check its ban-list question, say a refusal at once, judge the engine by its delivered version (hq to-be 45 Phase 1)

2026-10-06 10:44:38 +02:00

announce.go

A bundle stands on the toolchain it is compiled in (hq issue 211)

2026-10-03 22:18:20 +02:00

ask.go

One bus: the AMQP transport is gone from the controller

2026-09-28 03:36:16 +02:00

build_seat_test.go

A build machine serves the seat its credential claims (hq ADR 0190, the handover)

2026-10-03 02:47:49 +02:00

build.go

Let a walk wait for its delivery's word, and serve the delivery's owner (hq ADR 0239)

2026-10-07 00:01:42 +02:00

builds_current_test.go

The build role is the node-scoped seat node-build-agent, and its work is shared by every holder (hq ADR 0190)

2026-10-02 22:31:55 +02:00

builds_nats_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

builds_nats.go

Keep a replay from moving the mesh backwards, and tighten the queue's edges (review of hq ADR 0219)

2026-10-05 19:45:45 +02:00

builds.go

The controller asks the build role that has a holder, and hears both roles' outcomes (hq ADR 0190, the handover)

2026-10-03 02:51:03 +02:00

bus_nats.go

One bus: the AMQP transport is gone from the controller

2026-09-28 03:36:16 +02:00

bus_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

bus.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

calls_kept_test.go

Keep calls and hand acts on the bus, answer status at once, record durations (hq to-be 45 Phase 0)

2026-10-06 02:59:36 +02:00

calls_kept.go

Keep calls and hand acts on the bus, answer status at once, record durations (hq to-be 45 Phase 0)

2026-10-06 02:59:36 +02:00

calls_test.go

Keep a join token nowhere but in its caller's answer

2026-10-08 01:46:34 +02:00

calls.go

Keep a join token nowhere but in its caller's answer

2026-10-08 01:46:34 +02:00

conformance_test.go

Hold the Go emitter to the shared fixtures

2026-09-26 23:40:59 +02:00

contracts_test.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

contracts.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

declare.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

enrol_bus_credential_test.go

1.7 finished: minting, the file delivered, and a test flake I caused

2026-09-27 03:19:41 +02:00

enrol_claim_test.go

Review of 083: finishing an enrolment whose token was spent takes proof of the key's private half, a live lease and a first delivery — a public key alone cannot replay a spent token; shutdown leaves held messages for the broker; identical builds supersede; what is held leaves room in the prefetch

2026-09-22 14:33:13 +02:00

enrol_proof_test.go

The enrolment proof's message has a known answer, repeated in the host's test

2026-09-22 14:33:33 +02:00

enrol_reply_probe_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

enrol_shape_test.go

A module may hold several secrets from one provider, each a pair of its own

2026-09-21 20:28:16 +02:00

enrol_tunnel_key_test.go

A token can be issued for a machine's tunnel key, and it joins through the tunnel

2026-10-08 01:46:28 +02:00

enrolment.go

A token can be issued for a machine's tunnel key, and it joins through the tunnel

2026-10-08 01:46:28 +02:00

events.go

Let a walk wait for its delivery's word, and serve the delivery's owner (hq ADR 0239)

2026-10-07 00:01:42 +02:00

handacts_test.go

Keep calls and hand acts on the bus, answer status at once, record durations (hq to-be 45 Phase 0)

2026-10-06 02:59:36 +02:00

handacts.go

Record a push that only moves recorded builds as the person's word, not a repair (hq issue 301)

2026-10-08 00:12:23 +02:00

health_test.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

health.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

heard_order_test.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

heard_test.go

Keep the account of the sent declaration over an older one (hq issue 267)

2026-10-06 01:45:35 +02:00

merges.go

Catch up on merges the bus announced and never handed over (hq issue 266)

2026-10-06 01:29:21 +02:00

order_test.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

order.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

profile_report_test.go

The vault's seat, and a report that carries the machine's profile (hq ADR 0161)

2026-10-01 15:58:04 +02:00

protocol_test.go

Hold the network statement's field names on the controller's side (hq ADR 0241)

2026-10-07 18:53:21 +02:00

protocol.go

Raise a machine's network from what its engine says, once (hq ADR 0241)

2026-10-07 18:52:16 +02:00

queue_test.go

Keep a replay from moving the mesh backwards, and tighten the queue's edges (review of hq ADR 0219)

2026-10-05 19:45:45 +02:00

queue.go

Say a walk that waits too long, and a delivery's own stalls (hq ADR 0239)

2026-10-07 00:16:32 +02:00

receive_fake_test.go

Report a provider that keeps failing a consumer in status (hq ADR 0224)

2026-10-06 00:13:23 +02:00

receive_nats_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

receive_nats.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

receive.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

rekey_test.go

The mesh says what it applied, and the replay has an address it may use

2026-09-28 16:07:18 +02:00

report_retry_test.go

The mesh says what it applied, and the replay has an address it may use

2026-09-28 16:07:18 +02:00

retirement.go

Derive data protection from a module's declared data (hq ADR 0233)

2026-10-06 16:47:49 +02:00

seattools.go

Answer every seat call within ten seconds and keep what came of it (hq issue 265)

2026-10-06 01:14:58 +02:00

serve.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

stale_report_test.go

The mesh says what it applied, and the replay has an address it may use

2026-09-28 16:07:18 +02:00

standby_nats_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

standing_test.go

Hear what providers retire, and let a person approve, reject and delete (hq ADR 0230)

2026-10-06 14:41:15 +02:00

standing.go

Hear what providers retire, and let a person approve, reject and delete (hq ADR 0230)

2026-10-06 14:41:15 +02:00

store_window_test.go

One bus: the AMQP transport is gone from the controller

2026-09-28 03:36:16 +02:00

watched.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

window_test.go

The store window as a decision, and the problem moving it to the server

2026-09-27 00:05:52 +02:00

window.go

The consume side behind a seam, and the window wiring into the loop

2026-09-27 00:44:16 +02:00