mesh-controller

Archived

This repository has been archived on 2026-11-02. You can view files and clone it. You cannot open issues or pull requests or push a commit.

Files

T

History

jschoubben 8e0c22fc2e licences: submit-refresh, the module-produced refresh entry point

Phase C of model-access (ADR 0050). Refresh above calls an in-process
VendorRefresher, which would open the at-rest envelope inside the control
plane's own process. Anthropic must not: its refresh runs on the manager
node. So add SubmitRefresh, the companion that publishes a refresh a
manager node already performed -- it is given only the new access token in
the clear (sealed per holder, as any accepted key) and an opaque re-sealed
refresh envelope (stored unopened). The refresh token in the clear never
crosses this boundary. The reseal-and-publish half is extracted and shared
with Refresh, so the sealing logic is one implementation.

CLI: licence grant (print the opaque envelope), set-grant (store a
module-produced envelope -- adoption), submit-refresh (access token +
optional rotated envelope). Tests defend that the manager alone opens the
refresh token and the control plane never holds it in the clear.

Claude-Session: https://claude.ai/code/session_01LrgweAeERJYBg88c5cKDzF

2026-09-07 01:00:27 +02:00

broker

Resync hq ADR references 0044-0054 -> 0039-0049 after the hq record reconciliation

2026-09-05 12:47:13 +02:00

builder

A module may mirror an image it did not write

2026-08-30 18:28:05 +02:00

catalogue

fix: a require-only consumer of a parameterless provision still asks (and is minted a credential)

2026-09-06 23:20:58 +02:00

identity

A certificate is issued once and kept