This repository has been archived on 2026-11-02. You can view files and clone it. You cannot open issues or pull requests or push a commit.

jochen 9409bcec4b Run a verb from the controller's own running image, and refuse what it cannot run as a handover (hq issue 289) ...

The witness moves a running build aside into a directory the controller's user
cannot enter, then deletes it; a verb exec'd from os.Executable() in that window
failed with permission denied. /proc/self/exe stays valid while the process lives.
A verb that still cannot start, or arrives while the controller stops, is refused
with link.ErrHandingOver and marked retry: handing-over.

2026-10-07 02:13:17 +02:00

..

advisories_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

advisories.go

Grant the self-check its ban-list question, say a refusal at once, judge the engine by its delivered version (hq to-be 45 Phase 1)

2026-10-06 10:44:38 +02:00

announce.go

A bundle stands on the toolchain it is compiled in (hq issue 211)

2026-10-03 22:18:20 +02:00

ask.go

One bus: the AMQP transport is gone from the controller

2026-09-28 03:36:16 +02:00

build_seat_test.go

A build machine serves the seat its credential claims (hq ADR 0190, the handover)

2026-10-03 02:47:49 +02:00

build.go

Let a walk wait for its delivery's word, and serve the delivery's owner (hq ADR 0239)

2026-10-07 00:01:42 +02:00

builds_current_test.go

The build role is the node-scoped seat node-build-agent, and its work is shared by every holder (hq ADR 0190)

2026-10-02 22:31:55 +02:00

builds_nats_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

builds_nats.go

Keep a replay from moving the mesh backwards, and tighten the queue's edges (review of hq ADR 0219)

2026-10-05 19:45:45 +02:00

builds.go

The controller asks the build role that has a holder, and hears both roles' outcomes (hq ADR 0190, the handover)

2026-10-03 02:51:03 +02:00

bus_nats.go

One bus: the AMQP transport is gone from the controller

2026-09-28 03:36:16 +02:00

bus_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

bus.go

Say when the mesh is wrong: conditions, watchdogs, the bus's advisories, doctor (hq to-be 45 Phase 1)

2026-10-06 10:21:11 +02:00

calls_kept_test.go

Keep calls and hand acts on the bus, answer status at once, record durations (hq to-be 45 Phase 0)

2026-10-06 02:59:36 +02:00

calls_kept.go

Keep calls and hand acts on the bus, answer status at once, record durations (hq to-be 45 Phase 0)

2026-10-06 02:59:36 +02:00

calls_test.go

Run a verb from the controller's own running image, and refuse what it cannot run as a handover (hq issue 289)

2026-10-07 02:13:17 +02:00

calls.go

Run a verb from the controller's own running image, and refuse what it cannot run as a handover (hq issue 289)

2026-10-07 02:13:17 +02:00

conformance_test.go

Hold the Go emitter to the shared fixtures

2026-09-26 23:40:59 +02:00

contracts_test.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

contracts.go

Judge every pull request against the mesh that runs, before it merges (hq ADR 0237, to-be 45 §9)

2026-10-06 21:11:26 +02:00

declare.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

enrol_bus_credential_test.go

1.7 finished: minting, the file delivered, and a test flake I caused

2026-09-27 03:19:41 +02:00

enrol_claim_test.go

Review of 083: finishing an enrolment whose token was spent takes proof of the key's private half, a live lease and a first delivery — a public key alone cannot replay a spent token; shutdown leaves held messages for the broker; identical builds supersede; what is held leaves room in the prefetch

2026-09-22 14:33:13 +02:00

enrol_proof_test.go

The enrolment proof's message has a known answer, repeated in the host's test

2026-09-22 14:33:33 +02:00

enrol_reply_probe_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

enrol_shape_test.go

A module may hold several secrets from one provider, each a pair of its own

2026-09-21 20:28:16 +02:00

enrolment.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

events.go

Let a walk wait for its delivery's word, and serve the delivery's owner (hq ADR 0239)

2026-10-07 00:01:42 +02:00

handacts_test.go

Keep calls and hand acts on the bus, answer status at once, record durations (hq to-be 45 Phase 0)

2026-10-06 02:59:36 +02:00

handacts.go

Keep calls and hand acts on the bus, answer status at once, record durations (hq to-be 45 Phase 0)

2026-10-06 02:59:36 +02:00

heard_order_test.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

heard_test.go

Keep the account of the sent declaration over an older one (hq issue 267)

2026-10-06 01:45:35 +02:00

merges.go

Catch up on merges the bus announced and never handed over (hq issue 266)

2026-10-06 01:29:21 +02:00

order_test.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

order.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

profile_report_test.go

The vault's seat, and a report that carries the machine's profile (hq ADR 0161)

2026-10-01 15:58:04 +02:00

protocol_test.go

Keep what an adopted node reports holding, the firewall it found and what is reachable on it (hq ADR 0100)

2026-09-22 17:23:09 +02:00

protocol.go

Gate a release plan's first machine and roll a failed build back there (hq ADR 0236)

2026-10-06 18:56:54 +02:00

queue_test.go

Keep a replay from moving the mesh backwards, and tighten the queue's edges (review of hq ADR 0219)

2026-10-05 19:45:45 +02:00

queue.go

Say a walk that waits too long, and a delivery's own stalls (hq ADR 0239)

2026-10-07 00:16:32 +02:00

receive_fake_test.go

Report a provider that keeps failing a consumer in status (hq ADR 0224)

2026-10-06 00:13:23 +02:00

receive_nats_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

receive_nats.go

Judge every pull request against the mesh that runs, before it merges (hq ADR 0237, to-be 45 §9)

2026-10-06 21:11:26 +02:00

receive.go

Judge every pull request against the mesh that runs, before it merges (hq ADR 0237, to-be 45 §9)

2026-10-06 21:11:26 +02:00

rekey_test.go

The mesh says what it applied, and the replay has an address it may use

2026-09-28 16:07:18 +02:00

report_retry_test.go

The mesh says what it applied, and the replay has an address it may use

2026-09-28 16:07:18 +02:00

retirement.go

Derive data protection from a module's declared data (hq ADR 0233)

2026-10-06 16:47:49 +02:00

seattools.go

Answer every seat call within ten seconds and keep what came of it (hq issue 265)

2026-10-06 01:14:58 +02:00

serve.go

Judge every pull request against the mesh that runs, before it merges (hq ADR 0237, to-be 45 §9)

2026-10-06 21:11:26 +02:00

stale_report_test.go

The mesh says what it applied, and the replay has an address it may use

2026-09-28 16:07:18 +02:00

standby_nats_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

standing_test.go

Hear what providers retire, and let a person approve, reject and delete (hq ADR 0230)

2026-10-06 14:41:15 +02:00

standing.go

Hear what providers retire, and let a person approve, reject and delete (hq ADR 0230)

2026-10-06 14:41:15 +02:00

store_window_test.go

One bus: the AMQP transport is gone from the controller

2026-09-28 03:36:16 +02:00

watched.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

window_test.go

The store window as a decision, and the problem moving it to the server

2026-09-27 00:05:52 +02:00

window.go

The consume side behind a seam, and the window wiring into the loop

2026-09-27 00:44:16 +02:00