jochen 3379ab3b61 Let a trusted file that names its keys hold only those keys at the terminal (hq issue 586, ADR 0329 §5) ...

A module with a trusted mergeable file had its whole layer refused through the
settings verb, because such a file took any key. Once a module's files name the
keys they take (ADR 0326), each file takes only those, so only a trusted file's
named keys are the terminal's: betterbird's tags, in a file nothing trusts, is set
through the verb, while its accounts and identities stay the terminal's or the
operator's warrant. A module whose files name no keys keeps the whole-layer rule.

2026-10-13 02:03:12 +02:00

..

mesh-builder

Mark that the build agent takes work, so its health check can see it ready (novox/hq issue 544)

2026-10-12 21:33:12 +02:00

mesh-controller

Let a trusted file that names its keys hold only those keys at the terminal (hq issue 586, ADR 0329 §5)

2026-10-13 02:03:12 +02:00