jochen 87075fee68 Let the generic command verb only read, and keep keys and tokens at the terminal ...

Review found a chain through the command verb: set the operator's key to one
the caller holds, rotate secrets so they are sealed to it too, read the sealed
copies, open them. Whoever may call a verb includes agents (hq ADR 0266), so
command now runs an allow list of reading forms, and operator, identity,
token, broker, api, licence and every secret command but rotate are refused
through any verb.

2026-10-08 21:46:10 +02:00

..

mesh-builder

Serve the read verbs on the serving controller's own connection, and name every connection

2026-10-08 21:08:34 +02:00

mesh-controller

Let the generic command verb only read, and keep keys and tokens at the terminal

2026-10-08 21:46:10 +02:00