jochen 1d5a523a53 Keep places and accesses at the terminal, and refuse a line break in any setting ...

Through the settings verb a caller could place a module's directory at /etc
with an owner of its own and have root hand it over at the next send, or mount
any of the machine's paths into a container (hq ADR 0266). Both keys are now
the terminal's and never at the machine's own trees; a plans line that acts is
refused wherever its subcommand stands; and a line break in a setting, which a
file it is written into reads as a directive, is refused where it is kept and
where it is composed.

2026-10-08 21:54:30 +02:00

..

artifacts

Leave an eligible index for a confirmed collect instead of letting it go alone

2026-10-08 15:47:42 +02:00

broker

Serve the read verbs on the serving controller's own connection, and name every connection

2026-10-08 21:08:34 +02:00

builder

Let platform manifests go only on a confirmed collect, and copy again what a sweep took

2026-10-08 15:47:42 +02:00

catalogue

Keep places and accesses at the terminal, and refuse a line break in any setting

2026-10-08 21:54:30 +02:00

conditions

Give every module of a failed send a verdict, and excuse only the wait a build's own send brought (hq issue 318 review)

2026-10-08 15:25:58 +02:00

envfile

An address is read from the node's settings where it is used, never recorded with a port

2026-09-23 23:49:31 +02:00

facts

Name the account agents run as on a node, and say whether it can become root

2026-10-08 21:46:10 +02:00

identity

Adopt the tunnel as a mesh fact, refuse a mismatched takeover, and rekey after enrolment

2026-09-24 00:02:07 +02:00

inventory

Refuse a node's accounts through any verb, and a stale or service-account agent verdict

2026-10-08 21:46:10 +02:00

lease

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

licences

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

link

Name the account agents run as on a node, and say whether it can become root

2026-10-08 21:46:10 +02:00

lint

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

outward

Look twice before saying a probe failed, and say conditions in machine names (hq issue 277)

2026-10-06 18:40:33 +02:00

overlay

Retire the networking bundle and what the control plane stops shipping (hq ADR 0226)

2026-10-06 14:59:28 +02:00

secrets

A provider with one credential shares it with every consumer, remade for all at once (hq ADR 0158)

2026-10-01 12:26:44 +02:00

store

Run the controller as a Go bundle the host starts as a process (hq issue 213)

2026-10-04 01:45:25 +02:00

testbus

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

token

A token can be issued for a machine's tunnel key, and it joins through the tunnel

2026-10-08 02:06:19 +02:00