jschoubben fc573f951a Remove only a move's proven second copy, and never delete a handed-out original (hq issue 558) ...

Second review of #276: a dead letter delivered again beside its original
shares its request id and was removed as a copy, losing the ask; and a
publish that outlived the pause could delete an original a holder had
taken. A copy now names the message it copies, removals are said, the
publish waits inside the pause's margin, and an original handed out
meanwhile keeps its place while the copy goes.

2026-10-12 21:46:49 +02:00

..

advisories_test.go

Keep what a consumer gives up on until a person delivers it again or drops it

2026-10-08 18:32:58 +02:00

advisories.go

Keep what a consumer gives up on until a person delivers it again or drops it

2026-10-08 18:32:58 +02:00

announce.go

A bundle stands on the toolchain it is compiled in (hq issue 211)

2026-10-03 22:18:20 +02:00

ask.go

Wait out a forge not served for a moment when registering a build (novox/hq issue 486)

2026-10-12 11:23:03 +02:00

build_seat_test.go

A build machine serves the seat its credential claims (hq ADR 0190, the handover)

2026-10-03 02:47:49 +02:00

build.go

Judge a pull request's head merged into its trunk, and name the trunk commit

2026-10-12 17:27:01 +02:00

builds_current_test.go

The build role is the node-scoped seat node-build-agent, and its work is shared by every holder (hq ADR 0190)

2026-10-02 22:31:55 +02:00

builds_nats_test.go

Wait for the build's log lines to be stored before counting them (hq issue 507)

2026-10-11 21:05:04 +02:00

builds_nats.go

Make a queue move lossless and run its passes on the acting controller alone (hq issue 558)

2026-10-12 21:38:11 +02:00

builds.go

The controller asks the build role that has a holder, and hears both roles' outcomes (hq ADR 0190, the handover)

2026-10-03 02:51:03 +02:00

bus_nats.go

Deliver a dead letter again only where it is received, and never stop serving for the notices

2026-10-08 18:32:58 +02:00

bus_test.go

Wait out a forge not served for a moment when registering a build (novox/hq issue 486)

2026-10-12 11:23:03 +02:00

bus.go

Wait out a forge not served for a moment when registering a build (novox/hq issue 486)

2026-10-12 11:23:03 +02:00

calls_kept_test.go

Keep calls and hand acts on the bus, answer status at once, record durations (hq to-be 45 Phase 0)

2026-10-06 02:59:36 +02:00

calls_kept.go

Keep calls and hand acts on the bus, answer status at once, record durations (hq to-be 45 Phase 0)

2026-10-06 02:59:36 +02:00

calls_test.go

A kept command's first word is parted by any whitespace, and capped (review of issue 397)

2026-10-11 01:04:40 +02:00

calls_wait_test.go

Let plans wait for a plan to move and answer it as data (issue 229)

2026-10-12 16:18:54 +02:00

calls.go

Let plans wait for a plan to move and answer it as data (issue 229)

2026-10-12 16:18:54 +02:00

conformance_sources_test.go

Read the captured SDK, saying so, when the seat placed no clone beside the check (issue 449)

2026-10-11 04:20:54 +02:00

conformance_test.go

Read the captured SDK, saying so, when the seat placed no clone beside the check (issue 449)

2026-10-11 04:20:54 +02:00

contracts_test.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

contracts.go

Ask the operator for a condition's answers and act on the warrant, so release, stop, start and restart can be answered from any channel that proves who answered (hq ADR 0259)

2026-10-09 16:22:34 +02:00

deadletters_ask_test.go

Remove an ask's original only when its sequence still holds it, and only with a worker (issue 334)

2026-10-11 03:24:52 +02:00

deadletters_test.go

Count a dead letter by when it was kept, so one kept late still counts (issue 440)

2026-10-11 02:36:58 +02:00

deadletters.go

Remove an ask's original only when its sequence still holds it, and only with a worker (issue 334)

2026-10-11 03:24:52 +02:00

declare.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

enrol_bus_credential_test.go

1.7 finished: minting, the file delivered, and a test flake I caused

2026-09-27 03:19:41 +02:00

enrol_claim_test.go

Review of 083: finishing an enrolment whose token was spent takes proof of the key's private half, a live lease and a first delivery — a public key alone cannot replay a spent token; shutdown leaves held messages for the broker; identical builds supersede; what is held leaves room in the prefetch

2026-09-22 14:33:13 +02:00

enrol_proof_test.go

The enrolment proof's message has a known answer, repeated in the host's test

2026-09-22 14:33:33 +02:00

enrol_reply_probe_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

enrol_shape_test.go

A module may hold several secrets from one provider, each a pair of its own

2026-09-21 20:28:16 +02:00

enrol_tunnel_key_test.go

A token can be issued for a machine's tunnel key, and it joins through the tunnel

2026-10-08 02:06:19 +02:00

enrolment.go

Say in every declaration the assignment generation it came from, and record every send (hq issue 234)

2026-10-11 11:30:16 +02:00

events.go

Format PullUpdated, and keep the announced base head on a rechecked member

2026-10-12 17:52:12 +02:00

generation_test.go

Say in every declaration the assignment generation it came from, and record every send (hq issue 234)

2026-10-11 11:30:16 +02:00

handacts_test.go

Record a module's act on the operator's warrant from the router's own record (hq ADR 0274)

2026-10-10 03:40:49 +02:00

handacts.go

Record a module's act on the operator's warrant from the router's own record (hq ADR 0274)

2026-10-10 03:40:49 +02:00

handover_test.go

Sign the hand-over ask, and fail the line on the engine's refusal (hq issue 356, review)

2026-10-09 19:44:55 +02:00

handover.go

Ask a node's engine which of its directories the walk would refuse, read-only (issue 358)

2026-10-12 14:17:01 +02:00

health_test.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

health.go

Keep what each machine says of what it runs, raise it, and gate on it (hq ADR 0240, to-be 48 Phase A)

2026-10-07 02:28:16 +02:00

heard_order_test.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

heard_test.go

Keep the account of the sent declaration over an older one (hq issue 267)

2026-10-06 01:45:35 +02:00

judge_directories_test.go

Ask a node's engine which of its directories the walk would refuse, read-only (issue 358)

2026-10-12 14:17:01 +02:00

merges.go

Catch up on merges the bus announced and never handed over (hq issue 266)

2026-10-06 01:29:21 +02:00

meshcli_test.go

mesh-cli: give a terminal line the standard input mesh-cli carried, refuse it to any other, keep it nowhere

2026-10-09 17:01:36 +02:00

meshcli.go

mesh-cli: give a terminal line the standard input mesh-cli carried, refuse it to any other, keep it nowhere

2026-10-09 17:01:36 +02:00

order_test.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

order.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

pages_test.go

Page an answer larger than one message of the bus, and keep overviews brief (hq issue 314)

2026-10-08 12:19:16 +02:00

pages.go

Page an answer larger than one message of the bus, and keep overviews brief (hq issue 314)

2026-10-08 12:19:16 +02:00

profile_report_test.go

The vault's seat, and a report that carries the machine's profile (hq ADR 0161)

2026-10-01 15:58:04 +02:00

protocol_test.go

Hold the network statement's field names on the controller's side (hq ADR 0241)

2026-10-07 18:53:21 +02:00

protocol.go

Stop composing ADR 0312's group grant, so deliveries to the media machine pass again

2026-10-12 17:25:46 +02:00

queue_order_test.go

Remove only a move's proven second copy, and never delete a handed-out original (hq issue 558)

2026-10-12 21:46:49 +02:00

queue_order.go

Remove only a move's proven second copy, and never delete a handed-out original (hq issue 558)

2026-10-12 21:46:49 +02:00

queue_test.go

Keep a replay from moving the mesh backwards, and tighten the queue's edges (review of hq ADR 0219)

2026-10-05 19:45:45 +02:00

queue.go

Remove only a move's proven second copy, and never delete a handed-out original (hq issue 558)

2026-10-12 21:46:49 +02:00

receive_fake_test.go

Report a provider that keeps failing a consumer in status (hq ADR 0224)

2026-10-06 00:13:23 +02:00

receive_nats_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

receive_nats.go

Ask the operator for a condition's answers and act on the warrant, so release, stop, start and restart can be answered from any channel that proves who answered (hq ADR 0259)

2026-10-09 16:22:34 +02:00

receive.go

Ask the operator for a condition's answers and act on the warrant, so release, stop, start and restart can be answered from any channel that proves who answered (hq ADR 0259)

2026-10-09 16:22:34 +02:00

rekey_test.go

The mesh says what it applied, and the replay has an address it may use

2026-09-28 16:07:18 +02:00

replay314_test.go

Page an answer larger than one message of the bus, and keep overviews brief (hq issue 314)

2026-10-08 12:19:16 +02:00

replay330_test.go

Keep what a consumer gives up on until a person delivers it again or drops it

2026-10-08 18:32:58 +02:00

report_retry_test.go

The mesh says what it applied, and the replay has an address it may use

2026-09-28 16:07:18 +02:00

retirement.go

Take a provider's software-issued credential from the provider, sealed (hq issue 526, ADR 0305)

2026-10-12 01:07:16 +02:00

seattools.go

Page an answer larger than one message of the bus, and keep overviews brief (hq issue 314)

2026-10-08 12:19:16 +02:00

serve.go

Ask the operator for a condition's answers and act on the warrant, so release, stop, start and restart can be answered from any channel that proves who answered (hq ADR 0259)

2026-10-09 16:22:34 +02:00

setuid_search_test.go

Ask a node's engine for a fresh setuid search at the terminal (hq issue 361)

2026-10-10 01:56:56 +02:00

stale_report_test.go

The mesh says what it applied, and the replay has an address it may use

2026-09-28 16:07:18 +02:00

standby_nats_test.go

Give every test a bus of its own, at the release the mesh runs (hq ADR 0237)

2026-10-06 21:17:02 +02:00

standing_test.go

Hear what providers retire, and let a person approve, reject and delete (hq ADR 0230)

2026-10-06 14:41:15 +02:00

standing.go

Hear what providers retire, and let a person approve, reject and delete (hq ADR 0230)

2026-10-06 14:41:15 +02:00

store_window_test.go

One bus: the AMQP transport is gone from the controller

2026-09-28 03:36:16 +02:00

watched.go

Act under a lease, keep accounts by order, one writer at composition (hq to-be 45 Phase 2)

2026-10-06 12:29:18 +02:00

window_test.go

The store window as a decision, and the problem moving it to the server

2026-09-27 00:05:52 +02:00

window.go

The consume side behind a seam, and the window wiring into the loop

2026-09-27 00:44:16 +02:00