mesh-adminandClaude Opus 5.5 69367aa786 Correct a mirror written behind the writer's back, and write none without the lease ...

Review of mesh-controller#315 (hq issue 652): the writer trusted the bucket as
it read it once, so a former lease holder's write stayed for good; it wrote
without the lease, asking only after a refused compare-and-set; and the
declared config carried a manifest's declarations whole, so a field the
manifest gains would reach the bus unreviewed (ADR 0289 §9, §10, §12). Every
pass now reads the bucket and writes back the store's value where it differs,
asks for the lease before the pass and before every write, and a declaration
is mirrored as its listed fields (kind, default, why), with a test that fails
on a declaration field the list does not name.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-14 01:01:00 +00:00

..

artifacts

Build a change once: the check builds what its merge moves, the walk takes it by key

2026-10-13 23:04:40 +02:00

beside

Judge the SDK conformance fixtures against the SDK the controller pins, never a desktop's checkout (issue 449)

2026-10-11 04:19:01 +02:00

broker

Hold the composed grant and the captured genesis template to the mirrors

2026-10-14 00:33:05 +00:00

builder

Take only a check build its verdict names, and keep a build another check still names

2026-10-13 23:16:55 +02:00

catalogue

Keep the assignments and each module's declared config on the bus

2026-10-14 00:00:25 +00:00

conditions

Keep a condition's looks in the store, so a look that changes nothing writes no bucket (issue 420)

2026-10-12 12:11:13 +02:00

envfile

An address is read from the node's settings where it is used, never recorded with a port

2026-09-23 23:49:31 +02:00

facts

Move a module on a merge only when its build source holds a changed file (hq ADR 0267, issue 363)

2026-10-10 03:20:36 +02:00

identity

Copy each store test's database from a template migrated once, and hash test bus passwords at bcrypt's least cost

2026-10-12 23:53:06 +02:00

inventory

Correct a mirror written behind the writer's back, and write none without the lease

2026-10-14 01:01:00 +00:00

lease

Give a fast-renewing test lease a serving controller's time to renew, and prove the minted hash's cost

2026-10-13 00:08:48 +02:00

licences

Copy each store test's database from a template migrated once, and hash test bus passwords at bcrypt's least cost

2026-10-12 23:53:06 +02:00

link

Keep the assignments and each module's declared config on the bus

2026-10-14 00:00:25 +00:00

lint

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

outward

A settings proposal reads at a glance, its values whole where the sender is proven (issues 383 and 639)

2026-10-13 20:45:25 +02:00

overlay

Retire the networking bundle and what the control plane stops shipping (hq ADR 0226)

2026-10-06 14:59:28 +02:00

recordmirror

Correct a mirror written behind the writer's back, and write none without the lease

2026-10-14 01:01:00 +00:00

secrets

A provider with one credential shares it with every consumer, remade for all at once (hq ADR 0158)

2026-10-01 12:26:44 +02:00

store

Copy each store test's database from a template migrated once, and hash test bus passwords at bcrypt's least cost

2026-10-12 23:53:06 +02:00

testbus

Judge tests that read another repository against what the check clones, never the desktop's checkout (issue 432)

2026-10-11 02:55:04 +02:00

token

A token can be issued for a machine's tunnel key, and it joins through the tunnel

2026-10-08 02:06:19 +02:00