jschoubben e81f352979 An undeclared COPY --from is refused; an undeclared FROM is said, not yet refused ...

The mesh's own images start FROM a public base — the control plane's, the builder's,
the tool runtime's — and refusing those refuses genesis. They declare their bases
next; until then the base is named every build, with the remedy.

2026-09-21 20:48:00 +02:00

..

broker

A secret reaches a process as a file (ADR 0086)

2026-09-21 10:10:33 +02:00

builder

An undeclared COPY --from is refused; an undeclared FROM is said, not yet refused

2026-09-21 20:48:00 +02:00

catalogue

A build declares the vendor image it stands on, and a recipe fetches nothing undeclared

2026-09-21 20:45:36 +02:00

envfile

A secret reaches a process as a file (ADR 0086)

2026-09-21 10:10:33 +02:00

identity

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

inventory

A module may hold several secrets from one provider, each a pair of its own

2026-09-21 20:28:16 +02:00

licences

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

link

ask: the control plane calls a module's tool and prints its answer

2026-09-21 20:34:03 +02:00

overlay

The network carries the registry trust (ADR 0082, issues 042/048)

2026-09-17 23:05:23 +02:00

secrets

Recoverable means sealed to the current operator key; recovery names the provider

2026-09-21 01:16:32 +02:00

store

Read a context's store connection from a file, not only from the environment

2026-09-10 23:40:37 +02:00

token

The token carries the node's name

2026-08-30 02:36:57 +02:00