jochen 9632278e03 Count the quiet after a restart from when the controller first saw the search pending ...

The node-engine's own since starts again at every restart, so an agent that
restarted the engine in a loop kept agent-can-become-root quiet for ever (the
review of 2026-10-09). The controller now keeps when it first saw the verdict
waiting for the setuid search (migration 0085), forgets it at the next
complete verdict, and raises once the engine's own bound has passed since;
the bound and the pending reason are read from mesh-host's rootsearch.

2026-10-09 12:25:10 +02:00

..

advisories_test.go

Keep what a consumer gives up on until a person delivers it again or drops it

2026-10-08 18:32:58 +02:00

advisories.go

Keep what a consumer gives up on until a person delivers it again or drops it

2026-10-08 18:32:58 +02:00

announce.go

A bundle stands on the toolchain it is compiled in (hq issue 211)

2026-10-03 22:18:20 +02:00

ask.go

One bus: the AMQP transport is gone from the controller

2026-09-28 03:36:16 +02:00

build_seat_test.go

A build machine serves the seat its credential claims (hq ADR 0190, the handover)

2026-10-03 02:47:49 +02:00

build.go

Record the bases a build copies, keep them by the builds that stood on them, and copy each image once

2026-10-08 15:47:42 +02:00

builds_current_test.go

The build role is the node-scoped seat node-build-agent, and its work is shared by every holder (hq ADR 0190)

2026-10-02 22:31:55 +02:00

builds_nats_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

builds_nats.go

Serve the read verbs on the serving controller's own connection, and name every connection

2026-10-08 21:08:34 +02:00

builds.go

The controller asks the build role that has a holder, and hears both roles' outcomes (hq ADR 0190, the handover)

2026-10-03 02:51:03 +02:00

bus_nats.go

Deliver a dead letter again only where it is received, and never stop serving for the notices

2026-10-08 18:32:58 +02:00

bus_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

bus.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

calls_kept_test.go

Keep calls and hand acts on the bus, answer status at once, record durations (hq to-be 45 Phase 0)

2026-10-06 02:59:36 +02:00

calls_kept.go

Keep calls and hand acts on the bus, answer status at once, record durations (hq to-be 45 Phase 0)

2026-10-06 02:59:36 +02:00

calls_test.go

Answer a panicking verb with an error, say flag errors in the answer, and leave refused logins out of D15

2026-10-08 21:08:34 +02:00

calls.go

Answer a panicking verb with an error, say flag errors in the answer, and leave refused logins out of D15

2026-10-08 21:08:34 +02:00

conformance_test.go

Hold the Go emitter to the shared fixtures

2026-09-26 23:40:59 +02:00

contracts_test.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

contracts.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

deadletters_test.go

Deliver a dead letter again only where it is received, and never stop serving for the notices

2026-10-08 18:32:58 +02:00

deadletters.go

Deliver a dead letter again only where it is received, and never stop serving for the notices

2026-10-08 18:32:58 +02:00

declare.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

enrol_bus_credential_test.go

1.7 finished: minting, the file delivered, and a test flake I caused

2026-09-27 03:19:41 +02:00

enrol_claim_test.go

Review of 083: finishing an enrolment whose token was spent takes proof of the key's private half, a live lease and a first delivery — a public key alone cannot replay a spent token; shutdown leaves held messages for the broker; identical builds supersede; what is held leaves room in the prefetch

2026-09-22 14:33:13 +02:00

enrol_proof_test.go

The enrolment proof's message has a known answer, repeated in the host's test

2026-09-22 14:33:33 +02:00

enrol_reply_probe_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

enrol_shape_test.go

A module may hold several secrets from one provider, each a pair of its own

2026-09-21 20:28:16 +02:00

enrol_tunnel_key_test.go

A token can be issued for a machine's tunnel key, and it joins through the tunnel

2026-10-08 02:06:19 +02:00

enrolment.go

A token can be issued for a machine's tunnel key, and it joins through the tunnel

2026-10-08 02:06:19 +02:00

events.go

Let a walk wait for its delivery's word, and serve the delivery's owner (hq ADR 0239)

2026-10-07 00:01:42 +02:00

handacts_test.go

Keep calls and hand acts on the bus, answer status at once, record durations (hq to-be 45 Phase 0)

2026-10-06 02:59:36 +02:00

handacts.go

Record a push that only moves recorded builds as the person's word, not a repair (hq issue 301)

2026-10-08 00:12:23 +02:00

health_test.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

health.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

heard_order_test.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

heard_test.go

Keep the account of the sent declaration over an older one (hq issue 267)

2026-10-06 01:45:35 +02:00

merges.go

Catch up on merges the bus announced and never handed over (hq issue 266)

2026-10-06 01:29:21 +02:00

order_test.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

order.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

pages_test.go

Page an answer larger than one message of the bus, and keep overviews brief (hq issue 314)

2026-10-08 12:19:16 +02:00

pages.go

Page an answer larger than one message of the bus, and keep overviews brief (hq issue 314)

2026-10-08 12:19:16 +02:00

profile_report_test.go

The vault's seat, and a report that carries the machine's profile (hq ADR 0161)

2026-10-01 15:58:04 +02:00

protocol_test.go

Hold the network statement's field names on the controller's side (hq ADR 0241)

2026-10-07 18:53:21 +02:00

protocol.go

Count the quiet after a restart from when the controller first saw the search pending

2026-10-09 12:25:10 +02:00

queue_test.go

Keep a replay from moving the mesh backwards, and tighten the queue's edges (review of hq ADR 0219)

2026-10-05 19:45:45 +02:00

queue.go

Page an answer larger than one message of the bus, and keep overviews brief (hq issue 314)

2026-10-08 12:19:16 +02:00

receive_fake_test.go

Report a provider that keeps failing a consumer in status (hq ADR 0224)

2026-10-06 00:13:23 +02:00

receive_nats_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

receive_nats.go

Deliver a dead letter again only where it is received, and never stop serving for the notices

2026-10-08 18:32:58 +02:00

receive.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

rekey_test.go

The mesh says what it applied, and the replay has an address it may use

2026-09-28 16:07:18 +02:00

replay314_test.go

Page an answer larger than one message of the bus, and keep overviews brief (hq issue 314)

2026-10-08 12:19:16 +02:00

replay330_test.go

Keep what a consumer gives up on until a person delivers it again or drops it

2026-10-08 18:32:58 +02:00

report_retry_test.go

The mesh says what it applied, and the replay has an address it may use

2026-09-28 16:07:18 +02:00

retirement.go

Derive data protection from a module's declared data (hq ADR 0233)

2026-10-06 16:47:49 +02:00

seattools.go

Page an answer larger than one message of the bus, and keep overviews brief (hq issue 314)

2026-10-08 12:19:16 +02:00

serve.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

stale_report_test.go

The mesh says what it applied, and the replay has an address it may use

2026-09-28 16:07:18 +02:00

standby_nats_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

standing_test.go

Hear what providers retire, and let a person approve, reject and delete (hq ADR 0230)

2026-10-06 14:41:15 +02:00

standing.go

Hear what providers retire, and let a person approve, reject and delete (hq ADR 0230)

2026-10-06 14:41:15 +02:00

store_window_test.go

One bus: the AMQP transport is gone from the controller

2026-09-28 03:36:16 +02:00

watched.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

window_test.go

The store window as a decision, and the problem moving it to the server

2026-09-27 00:05:52 +02:00

window.go

The consume side behind a seam, and the window wiring into the loop

2026-09-27 00:44:16 +02:00