jochen 7bd61332cb Let a module declare a log the controller creates and never removes (ADR 0297) ...

The issue tracker's history lasts seven days on the events stream and its
bucket fills toward a cap with no warning (issues 501, 502). A module may
now declare `logs`; the controller creates each as a stream on the bus
(create-or-update, never deleted or recreated, reported when undeclared),
issues it to the owner's assignments in their membership, grants the
runtime exactly the append and direct-read subjects, and raises a
condition when any module's bucket or log reaches 75% of its cap, cleared
below 70%.

2026-10-11 19:22:43 +02:00

..

testdata

broker: grant each credential the tool calls that name it as the caller, and no other (hq issue 365)

2026-10-11 05:25:29 +02:00

agreement_catalogue_test.go

Judge tests that read another repository against what the check clones, never the desktop's checkout (issue 432)

2026-10-11 02:55:04 +02:00

agreement.go

Event names are checked now, per manifest and across the catalogue

2026-09-27 14:43:16 +02:00

broker_test.go

One bus: the AMQP transport is gone from the controller

2026-09-28 03:36:16 +02:00

broker.go

Work slower than the window says so, and one address is the bus's

2026-09-28 09:51:50 +02:00

callers_live_test.go

broker: grant each credential the tool calls that name it as the caller, and no other (hq issue 365)

2026-10-11 05:25:29 +02:00

callers_test.go

broker: grant each credential the tool calls that name it as the caller, and no other (hq issue 365)

2026-10-11 05:25:29 +02:00

callers.go

broker: grant each credential the tool calls that name it as the caller, and no other (hq issue 365)

2026-10-11 05:25:29 +02:00

cancelled_test.go

Keep a replay from moving the mesh backwards, and tighten the queue's edges (review of hq ADR 0219)

2026-10-05 19:45:45 +02:00

cancelled.go

Let a build agent be paused, have a build killed, and end an ask cancelled as it took it (hq ADR 0219)

2026-10-05 19:17:42 +02:00

consumer_from_now_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

consumer_upgrade_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

controller_asks_test.go

Ask the operator for a condition's answers and act on the warrant, so release, stop, start and restart can be answered from any channel that proves who answered (hq ADR 0259)

2026-10-09 16:22:34 +02:00

controller_buckets_test.go

Ask at most three at a time, wait out a refusal, need a router, and act only on a claimed open ask, as the review asked (hq ADR 0259)

2026-10-09 16:22:34 +02:00

controller_buckets.go

Ask the operator for a condition's answers and act on the warrant, so release, stop, start and restart can be answered from any channel that proves who answered (hq ADR 0259)

2026-10-09 16:22:34 +02:00

derived_test.go

Keep what a consumer gives up on until a person delivers it again or drops it

2026-10-08 18:32:58 +02:00

derived.go

Grant a seat's traffic by caller and by kind, so an ask's asker and a channel's kind are facts the bus enforces (hq ADR 0259)

2026-10-09 13:48:56 +02:00

genesis_template_test.go

Judge tests that read another repository against what the check clones, never the desktop's checkout (issue 432)

2026-10-11 02:55:04 +02:00

invokes_test.go

broker: grant each credential the tool calls that name it as the caller, and no other (hq issue 365)

2026-10-11 05:25:29 +02:00

jetstream_test.go

Serve the read verbs on the serving controller's own connection, and name every connection

2026-10-08 21:08:34 +02:00

jetstream.go

Let a module declare a log the controller creates and never removes (ADR 0297)

2026-10-11 19:22:43 +02:00

log_test.go

Let a module declare a log the controller creates and never removes (ADR 0297)

2026-10-11 19:22:43 +02:00

log.go

Let a module declare a log the controller creates and never removes (ADR 0297)

2026-10-11 19:22:43 +02:00

membership_test.go

The machine runs one tool runtime, loading every delivered bundle (hq ADR 0175, to-be 38 WP2.3)

2026-10-02 18:26:54 +02:00

membership.go

Let a module declare a log the controller creates and never removes (ADR 0297)

2026-10-11 19:22:43 +02:00

nats_golden_test.go

Grant the bus's own module the snapshot API and nothing else (hq ADR 0235)

2026-10-06 18:20:57 +02:00

nats_test.go

broker: grant each credential the tool calls that name it as the caller, and no other (hq issue 365)

2026-10-11 05:25:29 +02:00

nats.go

Let a module declare a log the controller creates and never removes (ADR 0297)

2026-10-11 19:22:43 +02:00

onnats_test.go

One bus: the AMQP transport is gone from the controller

2026-09-28 03:36:16 +02:00

onnats.go

One bus: the AMQP transport is gone from the controller

2026-09-28 03:36:16 +02:00

raise_live_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

raise.go

The bus's objects are raised on every start, and one switch says which bus

2026-09-27 02:59:05 +02:00

readiness_test.go

The move ends with the old broker going, not staying

2026-09-27 23:04:59 +02:00

readiness.go

The move ends with the old broker going, not staying

2026-09-27 23:04:59 +02:00

seattools_test.go

Rename node-hosts-file to node-hostname, and refuse one seat claimed under two names (hq ADR 0223)

2026-10-05 23:43:15 +02:00

seattraffic_test.go

Judge a machine root-free only on a positive, fresh measure, and believe a verified sender only there (hq ADR 0259 §8, review H2/H3)

2026-10-09 13:48:56 +02:00

seattraffic.go

Serve a trusted holder from a runtime of its own account, refuse it in the machine's runtime, and say while an agent can become root where it runs (hq ADR 0259 §8)

2026-10-09 13:48:56 +02:00

snapshot_live_test.go

Grant the bus's own module the snapshot API and nothing else (hq ADR 0235)

2026-10-06 18:20:57 +02:00

snapshot_test.go

Grant the bus's own module the snapshot API and nothing else (hq ADR 0235)

2026-10-06 18:20:57 +02:00

state_test.go

Grant a bar one key of the state it shows, and per-machine state its own machine's key (hq ADR 0260)

2026-10-08 15:51:20 +02:00

state.go

Grant a bar one key of the state it shows, and per-machine state its own machine's key (hq ADR 0260)

2026-10-08 15:51:20 +02:00

states_agreement_test.go

Let a walk wait for its delivery's word, and serve the delivery's owner (hq ADR 0239)

2026-10-07 00:01:42 +02:00

streams_test.go

Keep what a consumer gives up on until a person delivers it again or drops it

2026-10-08 18:32:58 +02:00

streams.go

Ask the operator for a condition's answers and act on the warrant, so release, stop, start and restart can be answered from any channel that proves who answered (hq ADR 0259)

2026-10-09 16:22:34 +02:00

users_test.go

Compose a bus user only for a module that can read an account

2026-10-04 17:32:50 +02:00

users.go

Let a module declare a log the controller creates and never removes (ADR 0297)

2026-10-11 19:22:43 +02:00

witness_grants_test.go

Read how a module says each resource is ready, and send it to engines that read it (hq ADR 0240, to-be 48 Phase B)

2026-10-07 16:17:50 +02:00

worker_type_change_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

writers_test.go

Ask a node's engine for a fresh setuid search at the terminal (hq issue 361)

2026-10-10 01:56:56 +02:00

writers.go

Ask a node's engine for a fresh setuid search at the terminal (hq issue 361)

2026-10-10 01:56:56 +02:00