mesh-adminandClaude Opus 5.5 def3ccefe3 Refuse templates read through a symlink anywhere under files/ ...

A symlinked files/ or a symlinked directory under it let module check, the merge
gate and module add read a template from outside the repository tree, and a
symlink no template names passed them while the build's packing refuses it
(review of mesh-controller#313). Every entry under files/ must now be a plain
directory or file, and templates are read through an os.Root of the module's
directory.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-14 00:51:48 +00:00

..

artifacts

Build a change once: the check builds what its merge moves, the walk takes it by key

2026-10-13 23:04:40 +02:00

beside

Judge the SDK conformance fixtures against the SDK the controller pins, never a desktop's checkout (issue 449)

2026-10-11 04:19:01 +02:00

broker

Read the one genesis bundle mesh-host carries now (hq issue 146, ADR 0331)

2026-10-13 01:16:10 +02:00

builder

Let a file resource name a template file in its module's repository: the templates and their tests

2026-10-13 23:57:33 +00:00

catalogue

Refuse templates read through a symlink anywhere under files/

2026-10-14 00:51:48 +00:00

conditions

Keep a condition's looks in the store, so a look that changes nothing writes no bucket (issue 420)

2026-10-12 12:11:13 +02:00

envfile

An address is read from the node's settings where it is used, never recorded with a port

2026-09-23 23:49:31 +02:00

facts

Move a module on a merge only when its build source holds a changed file (hq ADR 0267, issue 363)

2026-10-10 03:20:36 +02:00

identity

Copy each store test's database from a template migrated once, and hash test bus passwords at bcrypt's least cost

2026-10-12 23:53:06 +02:00

inventory

Let a file resource name a template file in its module's repository: the templates and their tests

2026-10-13 23:57:33 +00:00

lease

Give a fast-renewing test lease a serving controller's time to renew, and prove the minted hash's cost

2026-10-13 00:08:48 +02:00

licences

Copy each store test's database from a template migrated once, and hash test bus passwords at bcrypt's least cost

2026-10-12 23:53:06 +02:00

link

Let a drain lapse, bound the gate's wait on the controller's clock, keep a busy wait out of apply time

2026-10-14 00:07:31 +02:00

lint

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

outward

A settings proposal reads at a glance, its values whole where the sender is proven (issues 383 and 639)

2026-10-13 20:45:25 +02:00

overlay

Retire the networking bundle and what the control plane stops shipping (hq ADR 0226)

2026-10-06 14:59:28 +02:00

secrets

A provider with one credential shares it with every consumer, remade for all at once (hq ADR 0158)

2026-10-01 12:26:44 +02:00

store

Copy each store test's database from a template migrated once, and hash test bus passwords at bcrypt's least cost

2026-10-12 23:53:06 +02:00

testbus

Judge tests that read another repository against what the check clones, never the desktop's checkout (issue 432)

2026-10-11 02:55:04 +02:00

token

A token can be issued for a machine's tunnel key, and it joins through the tunnel

2026-10-08 02:06:19 +02:00