jochen e9f060e0be Read a plan by its id as a parameter, never as SQL (issue 561) ...

PlanByID pasted its id into the query, and the id comes from a caller of
the plans verb: an id holding a quote changed the query (x' or '1'='1
answered another plan). The id is now $1, and RecentPlans's limit too, so
no plan query is built from a value.

2026-10-12 16:33:23 +02:00

..

artifacts

Leave an eligible index for a confirmed collect instead of letting it go alone

2026-10-08 15:47:42 +02:00

beside

Judge the SDK conformance fixtures against the SDK the controller pins, never a desktop's checkout (issue 449)

2026-10-11 04:19:01 +02:00

broker

Ask a node's engine which of its directories the walk would refuse, read-only (issue 358)

2026-10-12 14:17:01 +02:00

builder

Judge an upstream pin's host like any name, and harden the upstream unpack (review 35, hq issue 345)

2026-10-12 13:51:35 +02:00

catalogue

Merge pull request 'Compose each read-write access's grant for the node-engine (hq ADR 0312, issue 537)' (#256) from feat/537-a-read-write-access-grants-the-paths-group into main

2026-10-12 14:20:27 +00:00

conditions

Keep a condition's looks in the store, so a look that changes nothing writes no bucket (issue 420)

2026-10-12 12:11:13 +02:00

envfile

An address is read from the node's settings where it is used, never recorded with a port

2026-09-23 23:49:31 +02:00

facts

Move a module on a merge only when its build source holds a changed file (hq ADR 0267, issue 363)

2026-10-10 03:20:36 +02:00

identity

Adopt the tunnel as a mesh fact, refuse a mismatched takeover, and rekey after enrolment

2026-09-24 00:02:07 +02:00

inventory

Read a plan by its id as a parameter, never as SQL (issue 561)

2026-10-12 16:33:23 +02:00

lease

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

licences

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

link

Merge pull request 'Compose each read-write access's grant for the node-engine (hq ADR 0312, issue 537)' (#256) from feat/537-a-read-write-access-grants-the-paths-group into main

2026-10-12 14:20:27 +00:00

lint

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

outward

Look twice before saying a probe failed, and say conditions in machine names (hq issue 277)

2026-10-06 18:40:33 +02:00

overlay

Retire the networking bundle and what the control plane stops shipping (hq ADR 0226)

2026-10-06 14:59:28 +02:00

secrets

A provider with one credential shares it with every consumer, remade for all at once (hq ADR 0158)

2026-10-01 12:26:44 +02:00

store

Run the controller as a Go bundle the host starts as a process (hq issue 213)

2026-10-04 01:45:25 +02:00

testbus

Judge tests that read another repository against what the check clones, never the desktop's checkout (issue 432)

2026-10-11 02:55:04 +02:00

token

A token can be issued for a machine's tunnel key, and it joins through the tunnel

2026-10-08 02:06:19 +02:00