jschoubben 4b33b72160 Reach asks for names on a routed endpoint, and its port stays the manifest's ...

A routed endpoint's port is how the proxy reaches it and nothing else (ADR 0045):
a public service listens from the mesh, only the proxy reaches it, and it is
exposed by name. So reach on a routed endpoint asks for names, and the port keeps
what the manifest said; on an unrouted one — git over ssh, a mail port, the bus —
it governs the port, because there is no name and the port is the only way in.

Found by trying to express a real module rather than by review: routed name public
because browsers post to it, machine-side port private because it serves a
dashboard in cleartext. Under one value for both there was no way to say it, and
'public' would have reopened a port narrowed an hour earlier.

novox/hq ADR 0138, corrected in place the same day.

2026-09-29 02:50:41 +02:00

..

accesses_test.go

catalogue: a module accesses operator-owned data, and does not own it

2026-09-05 22:10:58 +02:00

adoption_test.go

The filter constrains what arrives from outside, and names no network

2026-09-29 01:01:29 +02:00

adoption.go

Say that the guard names the runtime's bridges where the filter names their addresses (hq ADR 0103)

2026-09-22 19:51:10 +02:00

amqp_is_not_a_provision_test.go

AMQP is not a provision: the bus seat delivers the bus, and the word is refused

2026-09-27 23:29:00 +02:00

artifact_store_seat_test.go

Rename the mesh's seats to mesh-*, keeping their interfaces

2026-09-26 23:07:09 +02:00

artifacts_test.go

An address is read from the node's settings where it is used, never recorded with a port

2026-09-23 23:49:31 +02:00

artifacts.go

An address is read from the node's settings where it is used, never recorded with a port

2026-09-23 23:49:31 +02:00

bootstrap_cycle_test.go

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

bound_into_files_test.go

catalogue: announce a same-node provider at the port it is published on

2026-09-09 23:02:50 +02:00

bound_into_files.go

identity: a consumer's identity fits the tightest backend, via a slug (ADR 0054)

2026-09-05 02:51:39 +02:00

broker_seat_test.go

AMQP is not a provision: the bus seat delivers the bus, and the word is refused

2026-09-27 23:29:00 +02:00

brokered_test.go

A consumer is a module on a machine, not a machine

2026-09-01 02:40:09 +02:00

build_system_test.go

An artifact says which operating system it is built for

2026-09-29 00:54:27 +02:00

build_test.go

The builder resolves the SDK from the mesh registry, and can publish packages

2026-09-16 10:27:26 +02:00

build.go

An artifact says which operating system it is built for

2026-09-29 00:54:27 +02:00

co_located_test.go

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

computed_test.go

Write the registry's trust into the runtime's file and reload the runtime instead of restarting it; prefix reload-on like restart-on (hq ADR 0102)

2026-09-22 17:51:38 +02:00

contributes_test.go

fix: a require-only consumer of a parameterless provision still asks (and is minted a credential)

2026-09-06 23:20:58 +02:00

cron.go

catalogue: carry and validate a container schedule (ADR 0053)

2026-09-06 14:08:51 +02:00

declaration_test.go

The mesh composes the accounts; the module owns its server

2026-09-27 02:50:23 +02:00

declaration.go

Reach asks for names on a routed endpoint, and its port stays the manifest's

2026-09-29 02:50:41 +02:00

dir_into_test.go

A collision is two places, not two spellings

2026-09-26 18:25:28 +02:00

dir_into.go

The assignment's own root is a place, and the manifest's maps are placed

2026-09-26 18:18:13 +02:00

domain_test.go

Rename the mesh's seats to mesh-*, keeping their interfaces

2026-09-26 23:07:09 +02:00

events.go

Event names are checked now, per manifest and across the catalogue

2026-09-27 14:43:16 +02:00

filtering_foundation_test.go

The filter constrains what arrives from outside, and names no network

2026-09-29 01:01:29 +02:00

filtering_test.go

The filter constrains what arrives from outside, and names no network

2026-09-29 01:01:29 +02:00

filtering.go

Reach asks for names on a routed endpoint, and its port stays the manifest's

2026-09-29 02:50:41 +02:00

foundation_manifests_test.go

AMQP is not a provision: the bus seat delivers the bus, and the word is refused

2026-09-27 23:29:00 +02:00

holdings_test.go

A store row keeps its seat's protocol, and a holder may take work from its queue

2026-09-28 02:08:56 +02:00

hosts_region_test.go

review: hold the hosts region through composition, and say so in plan

2026-09-27 00:05:41 +02:00

identity_test.go

Resync hq ADR references 0044-0054 -> 0039-0049 after the hq record reconciliation

2026-09-05 12:47:13 +02:00

identity.go

Resync hq ADR references 0044-0054 -> 0039-0049 after the hq record reconciliation

2026-09-05 12:47:13 +02:00

jails_into_test.go

A module declares its fail2ban jail; the mesh composes them per node (to-be 31)

2026-09-27 17:20:50 +02:00

jails_into.go

A module declares its fail2ban jail; the mesh composes them per node (to-be 31)

2026-09-27 17:20:50 +02:00

kept_test.go

An operator key, a second seal on every own secret, and the vault keeps the export

2026-09-20 23:56:49 +02:00

licence_test.go

catalogue: deliver a keyless same-node provider's served facts

2026-09-07 05:08:04 +02:00

machine_into_files_test.go

A module can name the mesh's range: ${machine:mesh-range} (novox/hq ADR 0112)

2026-09-27 16:52:00 +02:00

machine_into_files.go

The mesh owns the operator's ~/.ssh: account fact + home-scoped resources (to-be 29)

2026-09-27 17:50:56 +02:00

machineside_test.go

What review found in the port machinery, fixed

2026-09-01 21:54:05 +02:00

manifest.go

An artifact says which operating system it is built for

2026-09-29 00:54:27 +02:00

mounts_test.go

Review: a failure is the same by resource id, not by the host's words; bound files and /run/docker.sock are declared

2026-09-21 19:23:02 +02:00

names_test.go

catalogue: give host-network containers the mesh's names too

2026-09-07 03:44:28 +02:00

naming_test.go

Refuse an action where it was written, not on the machine

2026-09-01 02:55:56 +02:00

naming.go

A provision names the engine, because a consumer is coupled to one

2026-08-31 17:12:46 +02:00

needs_test.go

needs is now own-secrets, named for whose it is

2026-08-31 13:47:21 +02:00

no_subjects_test.go

Event names are checked now, per manifest and across the catalogue

2026-09-27 14:43:16 +02:00

port_into_test.go

Prove the untouched environment is the same map, not an equal one

2026-09-22 23:29:28 +02:00

port_into.go

A module is told its port in a container's environment too (hq issue 088)

2026-09-22 22:36:28 +02:00

prepares_test.go

A module's name may contain a dot, so the derived step adds none

2026-09-28 15:44:18 +02:00

print_rehearsal_test.go

The filter constrains what arrives from outside, and names no network

2026-09-29 01:01:29 +02:00

provided_test.go

Facts carry the format as a template, so the control plane holds none (ADR 0120)

2026-09-27 01:33:20 +02:00

reach_test.go

Reach asks for names on a routed endpoint, and its port stays the manifest's

2026-09-29 02:50:41 +02:00

reflects_renamed_test.go

The restart-on rename reads both list shapes

2026-09-17 23:35:12 +02:00

resolve_loopback_test.go

A binding answered on this very node still carries an address

2026-09-14 21:11:37 +02:00

resolve_test.go

The broker credential resolves the mesh-broker seat, not the hub (issue 059)

2026-09-18 01:02:26 +02:00

resolve.go

A seat is handed over as one act, and the holder is on record

2026-09-27 23:22:20 +02:00

resolver_manifests_test.go

Name system seats by scope; let a module define its own (ADR 0121)

2026-09-27 14:30:56 +02:00

roster_test.go

The mesh owns the operator's ~/.ssh: account fact + home-scoped resources (to-be 29)

2026-09-27 17:50:56 +02:00

roster.go

The mesh owns the operator's ~/.ssh: account fact + home-scoped resources (to-be 29)

2026-09-27 17:50:56 +02:00

routing_test.go

a route composes its internal-network alias too, not only its public name

2026-09-25 16:51:38 +02:00

runonce_test.go

A run-once step may name what it reads: the pair run-once + restart-on is no longer refused (novox/hq ADR 0099)

2026-09-21 23:31:06 +02:00

schedule_test.go

catalogue: carry and validate a container schedule (ADR 0053)

2026-09-06 14:08:51 +02:00

seat_into_test.go

A store row keeps its seat's protocol, and a holder may take work from its queue

2026-09-28 02:08:56 +02:00

seat_into.go

An address is read from the node's settings where it is used, never recorded with a port

2026-09-23 23:49:31 +02:00

seats_declared_test.go

AMQP is not a provision: the bus seat delivers the bus, and the word is refused

2026-09-27 23:29:00 +02:00

seats_declared.go

A seat is handed over as one act, and the holder is on record

2026-09-27 23:22:20 +02:00

seats_test.go

The store owns the seat set, so only the control plane may judge a claim

2026-09-27 21:59:40 +02:00

seats.go

The seat declares the facts its holder states

2026-09-28 16:36:45 +02:00

secrets_in_environment_test.go

A module names who its secret files belong to (secrets-owner)

2026-09-21 10:19:00 +02:00

secrets_into_files_test.go

fix: fill a ptr-secret placeholder from the file-owner's credential, not the last consumer's

2026-09-06 13:46:55 +02:00

secrets_into_files.go

A module may hold several secrets from one provider, each a pair of its own

2026-09-21 20:28:16 +02:00

settings_test.go

A module can tell its provider what it needs

2026-08-29 23:35:43 +02:00

settings.go

An assignment says how far an endpoint reaches, and three things read it

2026-09-29 02:47:06 +02:00

several_contributions_test.go

contributes: a module's grant carries no value where it contributed several times

2026-09-24 18:54:35 +02:00

several_secrets_test.go

Review: one local name is still a local name; a local name is unique; recovery knows it; recipes read as instructions; a tag before a digest; ask fails at once when nothing serves

2026-09-21 21:03:22 +02:00

showcase_manifest_test.go

A module can be told which port it was given

2026-09-15 13:20:01 +02:00

ssh_client_test.go

The mesh owns the operator's ~/.ssh: account fact + home-scoped resources (to-be 29)

2026-09-27 17:50:56 +02:00

two_consumers_test.go

A consumer is a module on a machine, not a machine

2026-09-01 02:40:09 +02:00