mesh-controller

novox/mesh-controller

Fork 0

Files

T

History

jochen 4ead5a3df7

mesh/delivery-group group fix/418-node-reads rejected: a member's own check failed

Details

mesh/merge-gate pass: builds build-agent, mesh-controller → ace, g14, novox, shanks; no bus step; every machine composes with the change as it did without …

Details

mesh/repo-check pass: its merge-check.sh passed

Details

mesh/delivery superseded: a newer head of the same pull request

Details

Define the node-reads seat, refuse a holder without an account of its own, and tell it where its node keeps a secret (hq ADR 0310, issue 418)

Reading a file, searching one, listing a directory, the owner and mode of each
component of a path and looking up an account had no mesh tool, so they went
through the login shell's execute as the operator's account. node-reads is a
node seat with six verbs, each saying the commands it replaces. Its holder must
run as an account of its own (ADR 0310 §3), and its own runtime is given
MESH_SECRET_PLACES: the directory of every module's own secret, every credential
file and grant directory, the vault's directories and the sealed-secret keep,
so it refuses them by name before any read (§5).

2026-10-12 13:57:24 +02:00

artifacts

Leave an eligible index for a confirmed collect instead of letting it go alone

2026-10-08 15:47:42 +02:00

beside

Judge the SDK conformance fixtures against the SDK the controller pins, never a desktop's checkout (issue 449)

2026-10-11 04:19:01 +02:00

broker

Merge pull request 'A merge that shares nothing with the assembling batch, and whose group waits for no one, is cut at once (hq issue 525, ADR 0304 §1, ADR 0306 §2-3)' (#250 ) from feat/525-a-lone-merge-skips-the-window into main

2026-10-12 11:46:59 +00:00

builder

Merge pull request 'A check never sees the forge credential, and what it publishes is redacted (issue 462)' (#226 ) from fix/462-a-check-never-sees-the-forge-credential into main