jochen b0c4b849a7 Judge an upstream pin's host like any name, and harden the upstream unpack (review 35, hq issue 345) ...

The url was skipped by the installation check, so an installation's host or
an address passed; it is judged whole now, the vendor's host declared in the
artifact's names-on-purpose, and an address or a reserved name as the host
is refused. Only the version's dotted-quad reading is skipped. The unpack
caps its entries, drains xz before waiting for it, reads a pax global
header and a nested within's parents, and a redirect off https is not
followed.

2026-10-12 13:51:35 +02:00

..

artifacts

Leave an eligible index for a confirmed collect instead of letting it go alone

2026-10-08 15:47:42 +02:00

beside

Judge the SDK conformance fixtures against the SDK the controller pins, never a desktop's checkout (issue 449)

2026-10-11 04:19:01 +02:00

broker

Merge pull request 'A merge that shares nothing with the assembling batch, and whose group waits for no one, is cut at once (hq issue 525, ADR 0304 §1, ADR 0306 §2-3)' (#250) from feat/525-a-lone-merge-skips-the-window into main

2026-10-12 11:46:59 +00:00

builder

Judge an upstream pin's host like any name, and harden the upstream unpack (review 35, hq issue 345)

2026-10-12 13:51:35 +02:00

catalogue

Judge an upstream pin's host like any name, and harden the upstream unpack (review 35, hq issue 345)

2026-10-12 13:51:35 +02:00

conditions

Keep a condition's looks in the store, so a look that changes nothing writes no bucket (issue 420)

2026-10-12 12:11:13 +02:00

envfile

An address is read from the node's settings where it is used, never recorded with a port

2026-09-23 23:49:31 +02:00

facts

Move a module on a merge only when its build source holds a changed file (hq ADR 0267, issue 363)

2026-10-10 03:20:36 +02:00

identity

Adopt the tunnel as a mesh fact, refuse a mismatched takeover, and rekey after enrolment

2026-09-24 00:02:07 +02:00

inventory

Merge pull request 'A merge that shares nothing with the assembling batch, and whose group waits for no one, is cut at once (hq issue 525, ADR 0304 §1, ADR 0306 §2-3)' (#250) from feat/525-a-lone-merge-skips-the-window into main

2026-10-12 11:46:59 +00:00

lease

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

licences

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

link

Wait out a forge not served for a moment when registering a build (novox/hq issue 486)

2026-10-12 11:23:03 +02:00

lint

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

outward

Look twice before saying a probe failed, and say conditions in machine names (hq issue 277)

2026-10-06 18:40:33 +02:00

overlay

Retire the networking bundle and what the control plane stops shipping (hq ADR 0226)

2026-10-06 14:59:28 +02:00

secrets

A provider with one credential shares it with every consumer, remade for all at once (hq ADR 0158)

2026-10-01 12:26:44 +02:00

store

Run the controller as a Go bundle the host starts as a process (hq issue 213)

2026-10-04 01:45:25 +02:00

testbus

Judge tests that read another repository against what the check clones, never the desktop's checkout (issue 432)

2026-10-11 02:55:04 +02:00

token

A token can be issued for a machine's tunnel key, and it joins through the tunnel

2026-10-08 02:06:19 +02:00