jschoubben f151de103f Build a module from a repository and a path within it ...

The builder cloned a repository and read the manifest at its root, which means one
repository per module. Nothing we have is shaped that way, so the builder could be
asked to build nothing that exists (novox/hq ADR 0069).

The path travels the whole way — named when asking, carried in the request, used
to read the manifest and as the context everything is produced from, echoed back
in the result, and recorded as part of where a module came from. Without that last
part the mesh could notice a module was behind its source and then be unable to
rebuild it, which is the worst of both.

A path climbing out of the clone is refused: a machine whose job is building other
people's repositories must not read whatever else is on its disk.

Claude-Session: https://claude.ai/code/session_01D6qtiYU3P9jk3pnAXyAFyx

2026-09-12 16:45:50 +02:00

..

acts_test.go

assign: what it checks is the mesh, not the one machine

2026-09-10 21:11:33 +02:00

acts.go

assign: what it checks is the mesh, not the one machine

2026-09-10 21:11:33 +02:00

api_test.go

The command API, which refuses everything until it knows who is asking

2026-09-01 01:55:56 +02:00

api.go

The command API, which refuses everything until it knows who is asking

2026-09-01 01:55:56 +02:00

board_test.go

The board says what is waiting too, or it disagrees with the command

2026-08-31 06:00:04 +02:00

board.go

status: one machine that cannot be worked out no longer takes the answer from the rest

2026-09-10 21:12:06 +02:00

build.go

Build a module from a repository and a path within it

2026-09-12 16:45:50 +02:00

licence.go

licences: deliver the refresh token by the ordinary sealed path, not a bespoke envelope

2026-09-07 01:55:08 +02:00

main.go

Read a context's store connection from a file, not only from the environment

2026-09-10 23:40:37 +02:00

mesh_for_test.go

assign: what it checks is the mesh, not the one machine

2026-09-10 21:11:33 +02:00

modules.go

inventory: forgetting a module says what goes with it, and refuses until told

2026-09-10 21:11:15 +02:00

network_test.go

overlay: placing a node with nothing said no longer unplaces it

2026-09-10 21:17:09 +02:00

network.go

overlay: placing a node with nothing said no longer unplaces it

2026-09-10 21:17:09 +02:00

nodes_test.go

node public-domain: asking what it is no longer takes it away

2026-09-10 21:11:48 +02:00

nodes.go

The routing record is 0066, not 0056

2026-09-11 00:09:56 +02:00

plan.go

The routing record is 0066, not 0056

2026-09-11 00:09:56 +02:00

push_test.go

push: one machine that cannot be worked out no longer holds back the mesh

2026-09-10 20:59:21 +02:00

push.go

The routing record is 0066, not 0056

2026-09-11 00:09:56 +02:00

readable_test.go

status: one machine that cannot be worked out no longer takes the answer from the rest

2026-09-10 21:12:06 +02:00

readable.go

status: one machine that cannot be worked out no longer takes the answer from the rest

2026-09-10 21:12:06 +02:00

rotate.go

A consumer is a module on a machine, not a machine

2026-09-01 02:40:09 +02:00

secret_test.go

secret accept: see the flag that comes after the arguments

2026-08-31 23:05:10 +02:00

secret.go

secret accept: see the flag that comes after the arguments

2026-08-31 23:05:10 +02:00

status_test.go

status: one machine that cannot be worked out no longer takes the answer from the rest

2026-09-10 21:12:06 +02:00

status.go

status: one machine that cannot be worked out no longer takes the answer from the rest

2026-09-10 21:12:06 +02:00

stores.go

A command opens each store once, not once per machine

2026-08-31 13:35:39 +02:00