The assigner's state and verb placement are assignments, with its events, tools, views and every caller; the assigner copies the retired state at its start (issue 1966)

Claude-Session: https://claude.ai/code/session_01NcbgfFSnn24M3GcqttoU7i

modules/mesh-grants/internal/buscompose/accounts.go

@@ -8,7 +8,7 @@ import (
 
 // **The accounts the grants part wants, and the one shape a held account takes** (novox/hq ADR 0561 §1, §2; issue 774).
 //
-// The bus composer derives every user from placement, the manifests and the wants. For each account the mesh mints (a
+// The bus composer derives every user from assignments, the manifests and the wants. For each account the mesh mints (a
 // module's, a module's process's, a machine's provisioner client's), the grants part writes one key of its state
 // `accounts`, keyed by the bus user, holding the account's fields that are not secret: what the controller's credential
 // carries today beside the password. The vault watches that state, mints the user it holds no value for, and keeps the

modules/mesh-grants/internal/buscompose/buscompose_test.go

@@ -12,8 +12,8 @@ import (
 	"time"
 
 	"git.novox.be/novox/mesh-contracts/go/seats/meshbroker"
+	"git.novox.be/novox/mesh-contracts/go/seats/meshmoduleassigner"
 	"git.novox.be/novox/mesh-contracts/identity-and-access/go/seats/meshnodeenroller"
-	"git.novox.be/novox/mesh-contracts/placement/go/seats/meshmoduleassigner"
 
 	"git.novox.be/novox/mesh-contracts/identity-and-access/go/clients/meshvaultclient"
 	"git.novox.be/novox/mesh-contracts/identity-and-access/go/seats/meshvault"
@@ -57,17 +57,17 @@ func TestTheCopiedComposerComposesAsTheControllers(t *testing.T) {
 	t.Run("every node's compositions are read by their named readers alone and written by their node", everyNodesCompositions)
 	t.Run("a module's ledger is written by its ledger account alone", aLedgerIsWrittenByItsLedgerAccountAlone)
 	t.Run("the bus module's process alone keeps every module's bus state and serves the broker's verbs", theBusModulesProcessKeepsBusState)
-	// ADR 0567 §3, §9: a node reads every key of the seat's placement and its candidates (it composes with the whole
+	// ADR 0567 §3, §9: a node reads every key of the seat's assignments and its candidates (it composes with the whole
 	// proposal laid over), and none of its open proposals; it writes neither.
 	reads := strings.Join(NodeComposeReads("laptop"), " ")
-	for bucket, granted := range map[string]bool{PlacementBucket: true, PlacementCandidatesBucket: true,
-		PlacementProposalsBucket: false} {
+	for bucket, granted := range map[string]bool{AssignmentsBucket: true, AssignmentsCandidatesBucket: true,
+		AssignmentsProposalsBucket: false} {
 		if strings.Contains(reads, "$JS.API.DIRECT.GET.KV_"+bucket+".>") != granted || strings.Contains(reads, "$KV."+bucket+".laptop") {
 			t.Errorf("a node is granted %s: %v, want %v", bucket, !granted, granted)
 		}
 	}
 	// It hears the creation of those two buckets, and of no other.
-	if got := NodeComposeAdvisories(); len(got) != 2 || got[0] != "$JS.EVENT.ADVISORY.STREAM.CREATED.KV_mesh-delivery-assigner_placement" ||
+	if got := NodeComposeAdvisories(); len(got) != 2 || got[0] != "$JS.EVENT.ADVISORY.STREAM.CREATED.KV_mesh-delivery-assigner_assignments" ||
 		got[1] != "$JS.EVENT.ADVISORY.STREAM.CREATED.KV_mesh-delivery-assigner_candidates" {
 		t.Errorf("a node hears the creation of %v", got)
 	}
@@ -513,11 +513,11 @@ func TestTheCopiedComposerComposesAsTheControllers(t *testing.T) {
 		vault := ClaimedSeat{Seat: "mesh-vault", Scope: "mesh", Serves: []string{"get", "accept", "secret-ask", "issued",
 			"rotate", "move-in", "node-key", "own", "move-asks"}}
 		controller := ClaimedSeat{Seat: "mesh-controller", Scope: "mesh", Serves: strings.Split("tools,calls,status,nodes,"+
-			"node,placement-export,modules,seats,builds,plans,delivery-plan,delivery-order,delivery-check,deliver,"+
+			"node,assignments-export,modules,seats,builds,plans,delivery-plan,delivery-order,delivery-check,deliver,"+
 			"delivery-stop,delivery-backups-again,delivery-walks,plan,assign,unassign,pin,unpin,push,rotate,give,issued,"+
 			"secret-move,secret-ask,issue,token,settings,command,queue,cancel,clear,replay,try,kill,pause,resume,hand-act,"+
 			"drill,warranted,hand-acts,durations,conditions,healers,doctor,upgrade,bus,retire,cleanup,judge-directories,"+
-			"root-free,dead-letters,data,build,artifacts,held,collect,move-placement,move-config,mirrors,images", ",")}
+			"root-free,dead-letters,data,build,artifacts,held,collect,move-assignments,move-config,mirrors,images", ",")}
 		at := "nats://10.0.0.1:4222"
 		wanted := map[string]struct {
 			w        WantedAccount
@@ -790,7 +790,7 @@ func healthChecks(t *testing.T) {
 	}
 	// ADR 0571 clause 1: a read naming another module's log is issued to the reader as a log it reads, never writes.
 	if m := MembershipFor("a", Declared{Module: IndexerModule, Reads: []string{builds.BuildLogRead, "x.y"}},
-		Placements{Logs: map[string]bool{builds.BuildLogRead: true}}); len(m.Logs) != 1 || m.Logs[0].Writes ||
+		Assignments{Logs: map[string]bool{builds.BuildLogRead: true}}); len(m.Logs) != 1 || m.Logs[0].Writes ||
 		m.Logs[0].Stream != "LOG_mesh-delivery-builder_build-log" || m.Logs[0].Name != builds.BuildLogRead {
 		t.Errorf("the indexer's membership issues the logs %+v", m.Logs)
 	}
@@ -873,7 +873,7 @@ func healthChecks(t *testing.T) {
 		{"a flat event of a node seat held by a module is said flat", Declared{Module: "pause", Holds: []Seat{{Name: "node-power",
 			Scope: "node", Emits: []string{"slept"}}}}, "mesh.seat.node-power.event.slept", true},
 	} {
-		m := MembershipFor("a", c.d, Placements{})
+		m := MembershipFor("a", c.d, Assignments{})
 		listed := m.SeatTraffic != nil && slices.ContainsFunc(m.SeatTraffic.Publish, func(p string) bool { return p == c.subject })
 		perms, err := PermissionsFor(Principal{Kind: KindNodeTools, Node: "a", Carries: []Declared{c.d}})
 		if err != nil {
@@ -1019,7 +1019,7 @@ func everyNodesCompositions(t *testing.T) {
 		!MayPublish(runner, "$JS.API.DIRECT.GET.KV_composed-two.$KV.composed-two.two.node") {
 		t.Errorf("the runtime carrying the provisioner cannot read every node's compositions")
 	}
-	m := MembershipFor("one", Declared{Module: "mesh-delivery-view", Reads: []string{ComposedRead}}, Placements{})
+	m := MembershipFor("one", Declared{Module: "mesh-delivery-view", Reads: []string{ComposedRead}}, Assignments{})
 	if !slices.ContainsFunc(m.State, func(s StateIssued) bool {
 		return s.Name == ComposedRead && s.PerNode && s.Bucket == ComposedBucketPrefix && !s.Writes
 	}) {

modules/mesh-grants/internal/buscompose/creates_streams_test.go

@@ -22,7 +22,7 @@ func theGrantsPartCreatesOnlyDeclaredStreams(t *testing.T) {
 				Streams: []ModuleStream{{Module: "mesh-delivery-builder", Name: "BUILDASKS", Events: []string{"ask"}}}},
 			{Module: GrantsModule, State: []Bucket{{Module: GrantsModule, Name: "assertions"}}, Reads: []string{VaultBusAccounts}},
 			{Module: "node-tools", ToolRunner: true},
-			// The node-engine's manifest as a placement names it (issue 774, met twice on 2026-10-30): no account of its
+			// The node-engine's manifest as assignments names it (issue 774, met twice on 2026-10-30): no account of its
 			// own, so the runner would carry it, and its state is the node's to write alone.
 			{Module: EngineModule, NoAccount: true, Consumes: []string{"restic.backed-up"},
 				State: []Bucket{{Module: EngineModule, Name: "health"}, {Module: EngineModule, Name: EngineActsState}}},

modules/mesh-grants/internal/buscompose/fixtures_test.go

@@ -119,7 +119,7 @@ func ComposedFor(f UserListFixture) (string, []string, error) {
 
 // MembershipsFor is every membership a fixture's records issue, by `<node>.<module>`, as the composer makes them.
 func MembershipsFor(f UserListFixture) map[string]Membership {
-	where := PlacementsOf(f.Records, f.Records.Interchangeable)
+	where := AssignmentsOf(f.Records, f.Records.Interchangeable)
 	out := map[string]Membership{}
 	for node, ds := range f.Records.Assigned {
 		for _, d := range ds {

modules/mesh-grants/internal/buscompose/membership.go

@@ -15,8 +15,8 @@ import (
 // grant is the same composition read the other way. The shape issued today is the shape the mesh
 // already had, so nothing moves when a membership first arrives; only who decides it moves.
 
-// Placements is where every module runs, for deciding which instance answers for the module.
-type Placements struct {
+// Assignments is where every module runs, for deciding which instance answers for the module.
+type Assignments struct {
 	// Nodes is each module's machines.
 	Nodes map[string][]string
 	// Interchangeable is each module whose definition says its instances are the same anywhere,
@@ -33,14 +33,14 @@ type Placements struct {
 // plain subject: when it is the only instance, or when the definition says instances are
 // interchangeable. A stateful module on two machines gets only its machines' subjects, so a call
 // that names none reaches nothing rather than the wrong store.
-func (p Placements) AnswersForTheModule(module string) bool {
+func (p Assignments) AnswersForTheModule(module string) bool {
 	return len(p.Nodes[module]) <= 1 || p.Interchangeable[module]
 }
 
 // MembershipFor composes one assignment's membership from what it declared and where everything
 // runs. The subjects are the ones PermissionsFor grants, derived here once more only until the
 // grant itself is read from the membership — which is the next step, not this one.
-func MembershipFor(node string, d Declared, where Placements) Membership {
+func MembershipFor(node string, d Declared, where Assignments) Membership {
 	own := "mesh.mod." + d.Module
 	m := Membership{
 		Node: node, Module: d.Module,
@@ -101,9 +101,9 @@ func MembershipFor(node string, d Declared, where Placements) Membership {
 	return m
 }
 
-// PlacementsOf reads where everything runs from the records the bus's accounts are composed from.
-func PlacementsOf(r Records, interchangeable map[string]bool) Placements {
-	p := Placements{Nodes: map[string][]string{}, Interchangeable: interchangeable, Logs: DeclaredLogs(r)}
+// AssignmentsOf reads where everything runs from the records the bus's accounts are composed from.
+func AssignmentsOf(r Records, interchangeable map[string]bool) Assignments {
+	p := Assignments{Nodes: map[string][]string{}, Interchangeable: interchangeable, Logs: DeclaredLogs(r)}
 	for node, declared := range r.Assigned {
 		for _, d := range declared {
 			p.Nodes[d.Module] = append(p.Nodes[d.Module], node)
@@ -151,7 +151,7 @@ func PlacementsOf(r Records, interchangeable map[string]bool) Placements {
 // routerSeat is the seat the router of asks holds (novox/hq ADR 0259 §3).
 const routerSeat = "operator-channel"
 
-// placedCapabilities is what a kind's claim promises, as far as its placement lets the router believe it
+// placedCapabilities is what a kind's claim promises, as far as its assignments lets the router believe it
 // (novox/hq ADR 0259 §8): `verified-sender` only from a holder that runs as an account of its own, on a bus
 // account of its own — never one the machine's runtime carries as the operator's account — and only while
 // its machine and the router's were root-free when composed (rootFree; the review of 2026-10-09, H3). The

modules/mesh-grants/internal/buscompose/names.go

@@ -15,20 +15,20 @@ const (
 	// EnrolmentModule is the module holding the seat mesh-node-enroller.
 	EnrolmentModule = "mesh-enrolment"
 
-	// PlacementBucket and SeatHoldersBucket are the assigner's states placement and seat-holders (reads:
-	// mesh-delivery-assigner.placement; the seat-holders state is read as a named reader), PlacementRead the address of the first.
-	PlacementBucket   = AssignerModule + "_placement"
-	PlacementRead     = AssignerModule + ".placement"
+	// AssignmentsBucket and SeatHoldersBucket are the assigner's states assignments and seat-holders (reads:
+	// mesh-delivery-assigner.assignments; the seat-holders state is read as a named reader), AssignmentsRead the address of the first.
+	AssignmentsBucket = AssignerModule + "_assignments"
+	AssignmentsRead   = AssignerModule + ".assignments"
 	SeatHoldersRead   = AssignerModule + ".seat-holders"
 	SeatHoldersBucket = AssignerModule + "_seat-holders"
 
-	AssignerWantsBucket       = AssignerModule + "_wants"
-	PlacementCandidatesBucket = AssignerModule + "_candidates"
-	PlacementProposalsBucket  = AssignerModule + "_placement-proposals"
-	CandidatesBucket          = IndexerModule + "_candidates"
-	ModulesBucket             = IndexerModule + "_modules"
-	ManifestsBucket           = IndexerModule + "_manifests"
-	VerdictsBucket            = IndexerModule + "_verdicts"
+	AssignerWantsBucket         = AssignerModule + "_wants"
+	AssignmentsCandidatesBucket = AssignerModule + "_candidates"
+	AssignmentsProposalsBucket  = AssignerModule + "_assignments-proposals"
+	CandidatesBucket            = IndexerModule + "_candidates"
+	ModulesBucket               = IndexerModule + "_modules"
+	ManifestsBucket             = IndexerModule + "_manifests"
+	VerdictsBucket              = IndexerModule + "_verdicts"
 
 	EnrolmentsState  = "enrolments"
 	EnrolmentsBucket = EnrolmentModule + "_" + EnrolmentsState

modules/mesh-grants/internal/buscompose/names_test.go

@@ -32,7 +32,7 @@ func namesAreTheManifests(t *testing.T) {
 		{"reads", HaveBucket[:strings.Index(HaveBucket, "_")] + ".have", HaveBucket},
 		{"reads", NodeLoginsRead, NodeLoginsBucket},
 		{"reads", EnrolmentsRead, EnrolmentsBucket},
-		{"invokes", PlacementRead, PlacementBucket},
+		{"invokes", AssignmentsRead, AssignmentsBucket},
 		{"invokes", AssignerModule + ".wants", AssignerWantsBucket},
 		{"invokes", IndexerModule + ".modules", ModulesBucket},
 		{"invokes", IndexerModule + ".manifests", ManifestsBucket},

modules/mesh-grants/internal/buscompose/nats.go

@@ -740,7 +740,7 @@ func PermissionsFor(p Principal) (Permissions, error) {
 		// its own modules reads the other nodes' public records, which its firewall and resolver need (ADR 0547 §2). Read
 		// only: each node still writes its own keys alone.
 		pub = append(pub, readGrants(HaveBucket, "*."+HaveNodeWord)...)
-		// And what it composes its own modules from (ADR 0547 §2, ADR 0567 §9): the seat mesh-placement's placement and
+		// And what it composes its own modules from (ADR 0547 §2, ADR 0567 §9): the seat mesh-module-assigner's assignments and
 		// candidates, the indexer's modules and manifests, the builder's builds (the manifest of a build its want names), and mesh-config's resolved values of
 		// its own node alone. Read only.
 		pub = append(pub, NodeComposeReads(p.Node)...)
@@ -779,7 +779,7 @@ func PermissionsFor(p Principal) (Permissions, error) {
 			}
 			sub = append(sub, subject)
 		}
-		// And the creation of the seat mesh-placement's two states it composes from (ADR 0567 §9), so a node agent started
+		// And the creation of the seat mesh-module-assigner's two states it composes from (ADR 0567 §9), so a node agent started
 		// before they exist binds each when the bus says it was made, with no timer; no other bucket's.
 		sub = append(sub, NodeComposeAdvisories()...)
 		// And, while the vault serves it, the vault's move-in in its own name and nobody else's (issue 676): the
@@ -1535,7 +1535,7 @@ func CreateConsumerGrants(consumers []ModuleConsumer) []string {
 }
 
 // GrantsModule is the one module whose principal publishes the modules' memberships (novox/hq ADR 0547 §5): the grants
-// part, which composes them from the manifests and placement. It defines no stream and is granted no other subject here.
+// part, which composes them from the manifests and assignments. It defines no stream and is granted no other subject here.
 const GrantsModule = "mesh-grants"
 
 // The grants part's state memberships (novox/hq ADR 0571 clause 7): one key per assignment, `<node>.<module>`, its

modules/mesh-grants/internal/buscompose/provisioner.go

@@ -31,22 +31,22 @@ const ProvisionerSecret = "provisioner-broker"
 var ConfigResolvedBucket = BucketName("mesh-config", "resolved")
 
 // ProvisionerReads are the domains' buckets a provisioner client reads its own machine's keys of, each keyed
-// `<node>.…` (research 051): placement, the controller's assignments mirror (`<node>.<module>`), whose value carries
+// `<node>.…` (research 051): assignments, the controller's assignments mirror (`<node>.<module>`), whose value carries
 // the provisioner's plan of a module handed to it (inventory.Provisioning, design 57 P5); and config,
 // mesh-config's resolved values; and the seat mesh-provisioner's plans of its machine, `<node>.<module>` (novox/hq ADR
 // 0570 clause 2). **Named one by one**, as the controller's asks are: a domain that moves to the
 // provisioner adds its bucket here, and a bucket not named is one the client cannot read.
 var ProvisionerReads = []string{ConfigResolvedBucket}
 
-// ProvisionerReadsWhole are the buckets a provisioner client reads every key of: the seat mesh-placement's placement,
+// ProvisionerReadsWhole are the buckets a provisioner client reads every key of: the seat mesh-module-assigner's assignments,
 // where a provider's consumers are placed on their own machines, which the provider machine's client reads to fill
 // ${consumers:<provision>} with each one's credential (novox/hq ADR 0373, issue 679; ADR 0567, issue 1126: the
-// controller's assignments mirror it read before is gone). It holds placement, never a secret's value; the client
+// controller's assignments mirror it read before is gone). It holds assignments, never a secret's value; the client
 // writes none of it. **The seat's plans are read whole for the same
 // reason** (2026-10-30 recovery, issue 774): the client V3 watches every machine's plans to bind a provider's
 // consumers, and granted only its own machine's keys it read none. ADR 0570 clause 3 has providers act on the seat's
 // provision keys instead; once the client does, plans go back to its own machine's keys.
-var ProvisionerReadsWhole = []string{PlacementBucket, ProvisionerPlansBucket}
+var ProvisionerReadsWhole = []string{AssignmentsBucket, ProvisionerPlansBucket}
 
 // BoundState is a providing module's state of entries, one per consumer (mesh-sdk go/provider, issue 678): a
 // consumer's machine's client reads its own keys of it, `<node>.<module>.<provision>[.<local>]`, to fill

modules/mesh-grants/internal/buscompose/state.go

@@ -334,24 +334,24 @@ func stateNames(buckets []Bucket) []string {
 const ResolvedBucket = "mesh-config_resolved"
 
 // NodeComposeReads is what a node's agent reads to compose its own modules (novox/hq ADR 0547 §2, ADR 0567 §3, §9,
-// issue 1126): every key of the seat mesh-placement's placement and candidates (both the assigner's states), of the
+// issue 1126): every key of the seat mesh-module-assigner's assignments and candidates (both the assigner's states), of the
 // indexer's modules and manifests and of the builder's builds, and of mesh-config's resolved values only its own node's,
 // `<node>.>`. Every candidate key, not only `*.<node>`: a node answering its candidate composes with the whole
-// proposal laid over (the seed places every node at once, and a binding crosses nodes), and nothing in a placement is
+// proposal laid over (the seed places every node at once, and a binding crosses nodes), and nothing in assignments is
 // secret. Reads only; the node is checked as every subject token is by the caller's principal.
 func NodeComposeReads(node string) []string {
 	var out []string
-	for _, bucket := range []string{PlacementBucket, PlacementCandidatesBucket, ModulesBucket,
+	for _, bucket := range []string{AssignmentsBucket, AssignmentsCandidatesBucket, ModulesBucket,
 		ManifestsBucket, builds.BuilderBuildsBucket} {
 		out = append(out, readGrants(bucket, "")...)
 	}
 	return append(out, readGrants(ResolvedBucket, node+".>")...)
 }
 
-// NodeComposeAdvisories are the stream-created advisories of the seat mesh-placement's placement and candidates
+// NodeComposeAdvisories are the stream-created advisories of the seat mesh-module-assigner's assignments and candidates
 // (ADR 0567 §9): what a node agent hears to bind each once it is made. Those two and no wider.
 func NodeComposeAdvisories() []string {
-	return []string{StreamCreatedAdvisory(PlacementBucket), StreamCreatedAdvisory(PlacementCandidatesBucket)}
+	return []string{StreamCreatedAdvisory(AssignmentsBucket), StreamCreatedAdvisory(AssignmentsCandidatesBucket)}
 }
 
 // ServedReadGrants is the read of each key of mesh-config's resolved values named, `<node>.<module>.<key>`

modules/mesh-grants/internal/buscompose/testdata/controller-credentials.json

@@ -3,7 +3,7 @@
  "rows": [
   {
    "name": "module",
-   "held": "{\"url\":\"nats://10.0.0.1:4222\",\"fingerprint\":\"ab:cd\",\"node\":\"laptop\",\"module\":\"cap-bot\",\"user\":\"laptop.cap-bot\",\"password\":\"pw-module\",\"claims\":[{\"seat\":\"mesh-vault\",\"scope\":\"mesh\",\"serves\":[\"get\",\"accept\",\"secret-ask\",\"issued\",\"rotate\",\"move-in\",\"node-key\",\"own\",\"move-asks\"]},{\"seat\":\"node-service-manager\",\"scope\":\"node\",\"serves\":[\"status\"]},{\"seat\":\"mesh-controller\",\"scope\":\"mesh\",\"serves\":[\"tools\",\"calls\",\"status\",\"nodes\",\"node\",\"placement-export\",\"modules\",\"seats\",\"builds\",\"plans\",\"delivery-plan\",\"delivery-order\",\"delivery-check\",\"deliver\",\"delivery-stop\",\"delivery-backups-again\",\"delivery-walks\",\"plan\",\"assign\",\"unassign\",\"pin\",\"unpin\",\"push\",\"rotate\",\"give\",\"issued\",\"secret-move\",\"secret-ask\",\"issue\",\"token\",\"settings\",\"command\",\"queue\",\"cancel\",\"clear\",\"replay\",\"try\",\"kill\",\"pause\",\"resume\",\"hand-act\",\"drill\",\"warranted\",\"hand-acts\",\"durations\",\"conditions\",\"healers\",\"doctor\",\"upgrade\",\"bus\",\"retire\",\"cleanup\",\"judge-directories\",\"root-free\",\"dead-letters\",\"data\",\"build\",\"artifacts\",\"held\",\"collect\",\"move-placement\",\"move-config\",\"mirrors\",\"images\"]},{\"seat\":\"no-such-seat\",\"scope\":\"node\"}]}"
+   "held": "{\"url\":\"nats://10.0.0.1:4222\",\"fingerprint\":\"ab:cd\",\"node\":\"laptop\",\"module\":\"cap-bot\",\"user\":\"laptop.cap-bot\",\"password\":\"pw-module\",\"claims\":[{\"seat\":\"mesh-vault\",\"scope\":\"mesh\",\"serves\":[\"get\",\"accept\",\"secret-ask\",\"issued\",\"rotate\",\"move-in\",\"node-key\",\"own\",\"move-asks\"]},{\"seat\":\"node-service-manager\",\"scope\":\"node\",\"serves\":[\"status\"]},{\"seat\":\"mesh-controller\",\"scope\":\"mesh\",\"serves\":[\"tools\",\"calls\",\"status\",\"nodes\",\"node\",\"assignments-export\",\"modules\",\"seats\",\"builds\",\"plans\",\"delivery-plan\",\"delivery-order\",\"delivery-check\",\"deliver\",\"delivery-stop\",\"delivery-backups-again\",\"delivery-walks\",\"plan\",\"assign\",\"unassign\",\"pin\",\"unpin\",\"push\",\"rotate\",\"give\",\"issued\",\"secret-move\",\"secret-ask\",\"issue\",\"token\",\"settings\",\"command\",\"queue\",\"cancel\",\"clear\",\"replay\",\"try\",\"kill\",\"pause\",\"resume\",\"hand-act\",\"drill\",\"warranted\",\"hand-acts\",\"durations\",\"conditions\",\"healers\",\"doctor\",\"upgrade\",\"bus\",\"retire\",\"cleanup\",\"judge-directories\",\"root-free\",\"dead-letters\",\"data\",\"build\",\"artifacts\",\"held\",\"collect\",\"move-assignments\",\"move-config\",\"mirrors\",\"images\"]},{\"seat\":\"no-such-seat\",\"scope\":\"node\"}]}"
   },
   {
    "name": "module-no-claims-no-fingerprint",

modules/mesh-grants/internal/buscompose/users.go

@@ -75,7 +75,7 @@ type Declared struct {
 	// 0495 clause 3, issue 1790): granted nothing, kept to be said.
 	ReadsRefused []string
 	// ReadLogs are, of its reads, those naming another module's log (`<module>.<log>`, novox/hq ADR 0571 clause 1): filled
-	// by Users and PlacementsOf from the logs the modules placed anywhere declare, never by a caller.
+	// by Users and AssignmentsOf from the logs the modules placed anywhere declare, never by a caller.
 	ReadLogs []string
 	// KeyedReads are keys of other modules' state it reads, each one key alone: what a seat's holder is
 	// granted for the pieces the modules beside it offer (novox/hq ADR 0260).
@@ -231,7 +231,7 @@ func Users(r Records) ([]Principal, error) {
 			}
 		}
 		for _, d := range r.Assigned[node] {
-			// **The node-engine's manifest is no placed module's** (novox/hq ADR 0563 §2, §3; issue 774): where a placement
+			// **The node-engine's manifest is no placed module's** (novox/hq ADR 0563 §2, §3; issue 774): where assignments
 			// names it, it adds no user, no process and nothing the runner carries; its grants are the node's account's.
 			if !Composed(d) {
 				continue
@@ -541,7 +541,7 @@ func boundBucketsOf(r Records) []string {
 }
 
 // Composed says a placed module is composed as one: its own user, its processes and what the runner carries of it.
-// The node-engine's manifest (EngineModule) is not, though a placement may name it: each node's engine speaks as the
+// The node-engine's manifest (EngineModule) is not, though assignments may name it: each node's engine speaks as the
 // node's account, which alone writes the engine's state under its own key (engineGrants, novox/hq ADR 0563 §2, §3), and
 // Records.Engine creates that state. Granted to another account it is a second writer, and the writers table refuses
 // the whole list (issue 774: met for mesh-host_acts and then mesh-host_health, 2026-10-30).

modules/mesh-grants/internal/grants/accounts.go

@@ -12,10 +12,10 @@ import (
 )
 
 // **The accounts the mesh wants, said to the vault** (novox/hq ADR 0561 §2, issue 774). The bus composer derives every
-// user from placement, the manifests and the wants; for each account the vault mints (a module's, a process's, a
+// user from assignments, the manifests and the wants; for each account the vault mints (a module's, a process's, a
 // machine's provisioner client's), the part writes one key of its state `accounts`, keyed by the bus user, with the
 // fields the controller's credential carries beside the password. A key is written only when it differs, and deleted
-// only when placement no longer names its user and every input of the pass was read: a refused read never retires an
+// only when assignments no longer names its user and every input of the pass was read: a refused read never retires an
 // account. The vault alone reads the state (buscompose.NamedReaders); it mints each user it holds no value for.
 
 // StateAccounts is the part's state of wanted accounts.
@@ -119,7 +119,7 @@ func (p *Part) Accounts(user string) (any, error) {
 		}
 		if !found {
 			if user != "" {
-				return nil, fmt.Errorf("no account %s is wanted: placement composes no module, process or provisioner client of that user", user)
+				return nil, fmt.Errorf("no account %s is wanted: assignments composes no module, process or provisioner client of that user", user)
 			}
 			continue
 		}
@@ -149,7 +149,7 @@ type AccountsWritten struct {
 	Wanted  int      `json:"wanted"`
 	Written []string `json:"written,omitempty"`
 	Deleted []string `json:"deleted,omitempty"`
-	// Kept are keys placement no longer names that this pass did not delete, with why.
+	// Kept are keys assignments no longer names that this pass did not delete, with why.
 	Kept []string `json:"kept,omitempty"`
 }
 
@@ -198,7 +198,7 @@ func (p *Part) writeAccounts(res *Result, in Inputs, recs buscompose.Records) {
 		}
 		switch {
 		case placed(user):
-			done.Kept = append(done.Kept, user+": placement still names it (composed with no account this pass)")
+			done.Kept = append(done.Kept, user+": assignments still names it (composed with no account this pass)")
 			continue
 		case len(failed) > 0:
 			done.Kept = append(done.Kept, user+": a read of this pass failed, so no account is retired")

modules/mesh-grants/internal/grants/firstviews.go

@@ -21,7 +21,7 @@ import (
 )
 
 // **The grants part's first views** (novox/hq ADR 0615 §1, §4 to §6, ADR 0621, ADR 0622; design 25 § 12.2; DLV-F4r,
-// DLV-R1). The part reads the assigner's placement and wants and the indexer's manifests, modules and verdicts no longer
+// DLV-R1). The part reads the assigner's assignments and wants and the indexer's manifests, modules and verdicts no longer
 // from their buckets, but by each owner's first-view tool, asked once at its start, then from the owner's views family
 // alone (each event one changed key with its revision), asking once more only on a gap in revisions, never on a timer.
 // The verdicts alone are followed on the seat mesh-catalog's manifest-accepted and manifest-refused, which carry the revision
@@ -48,10 +48,10 @@ const (
 	IndexerModule  = "mesh-delivery-indexer"
 )
 
-// FirstViews are the five (ADR 0615 §3 as ADR 0622 §1 amends it: the grants part's placement, wants, manifests,
+// FirstViews are the five (ADR 0615 §3 as ADR 0622 §1 amends it: the grants part's assignments, wants, manifests,
 // modules and verdicts).
 var FirstViews = []FirstView{
-	{Owner: AssignerModule, Tool: AssignerModule + ".placement", State: "placement", Read: ReadPlacement},
+	{Owner: AssignerModule, Tool: AssignerModule + ".assignments", State: "assignments", Read: ReadAssignments},
 	{Owner: AssignerModule, Tool: AssignerModule + ".wants", State: "wants", Read: ReadWants},
 	{Owner: IndexerModule, Tool: IndexerModule + ".manifests", State: "manifests", Read: ReadManifests},
 	{Owner: IndexerModule, Tool: IndexerModule + ".modules", State: "modules", Read: ReadModules},
@@ -244,7 +244,7 @@ func (v *Views) Statuses() []views.Status {
 	return out
 }
 
-// Again asks the first view of one state (its state name, `placement`, or its tool) once more, or every one when state is
+// Again asks the first view of one state (its state name, `assignments`, or its tool) once more, or every one when state is
 // empty, each on a goroutine of its own; it answers which it asked, or refuses a state that is none of the five.
 func (v *Views) Again(ctx context.Context, state, why string) ([]string, error) {
 	var asked []string
@@ -257,7 +257,7 @@ func (v *Views) Again(ctx context.Context, state, why string) ([]string, error)
 		asked = append(asked, fv.Tool)
 	}
 	if len(asked) == 0 {
-		return nil, fmt.Errorf("%q is no first view of the grants part: one of placement, wants, manifests, modules, verdicts, or none for all", state)
+		return nil, fmt.Errorf("%q is no first view of the grants part: one of assignments, wants, manifests, modules, verdicts, or none for all", state)
 	}
 	return asked, nil
 }
@@ -459,7 +459,7 @@ func (p *Part) AskFirstViewAgain(caller, state, why string, record func(what, wh
 			}
 		}
 		if which == "" {
-			return nil, fmt.Errorf("%q is no first view of the grants part: one of placement, wants, manifests, modules, verdicts, or none for all", state)
+			return nil, fmt.Errorf("%q is no first view of the grants part: one of assignments, wants, manifests, modules, verdicts, or none for all", state)
 		}
 	}
 	if strings.TrimSpace(why) == "" {

modules/mesh-grants/internal/grants/follow.go

@@ -15,13 +15,13 @@ type Watcher interface {
 	Watch(state string, changed func(key string, value []byte), ended func(error)) error
 }
 
-// Followed are the states whose change composes again: placement, the indexer's manifests by module, the resolved
+// Followed are the states whose change composes again: assignments, the indexer's manifests by module, the resolved
 // config values, the node agents' haves (a machine's first have, and the bus node's loaded list) and the assigner's
 // wants (the manifest each machine is wanted to run), and the vault's hashes of the bus accounts.
 //
 // And the seat mesh-enrolment's keys (ADR 0587 §4, §5): a key at live composes enrol.<node>, and its end, by the holder or by
 // the bus's expiry, is a change of the key that takes the user out; no event is needed beside the watch.
-var Followed = []string{ReadModules, ReadVerdicts, ReadResolved, ReadHave, ReadWants, ReadAccounts, ReadPlacement, ReadEnrolments,
+var Followed = []string{ReadModules, ReadVerdicts, ReadResolved, ReadHave, ReadWants, ReadAccounts, ReadAssignments, ReadEnrolments,
 	ReadNodeLogins}
 
 // Follower composes again on every change it hears, never on a timer. It never stops for a refusal: a watch it cannot

modules/mesh-grants/internal/grants/grants.go

@@ -34,7 +34,7 @@ type GrantsWritten struct {
 	Deleted []string `json:"deleted,omitempty"`
 	// Kept says why a pass wrote and deleted nothing, or left a module out.
 	Kept []string `json:"kept,omitempty"`
-	// Missing is each module the placement or an assignment puts on a machine that has no grant after the pass,
+	// Missing is each module the assignments or an assignment puts on a machine that has no grant after the pass,
 	// `<module>: <why>`: the assigner's sixth rule wants none of it (MissingGrants). Never passed over in silence: once
 	// the part's grants are the ones read, it is the condition mesh-grants.grant-missing.
 	Missing []string `json:"missing,omitempty"`

modules/mesh-grants/internal/grants/inputs.go

@@ -19,15 +19,15 @@ import (
 
 	"mesh-grants/internal/buscompose"
 
+	"git.novox.be/novox/mesh-contracts/go/clients/meshmoduleassignerclient"
 	"git.novox.be/novox/mesh-contracts/go/clients/nodeengineclient"
+	"git.novox.be/novox/mesh-contracts/go/seats/meshmoduleassigner"
 	"git.novox.be/novox/mesh-contracts/go/seats/nodeengine"
 	"git.novox.be/novox/mesh-contracts/identity-and-access/go/clients/meshvaultclient"
 	"git.novox.be/novox/mesh-contracts/identity-and-access/go/seats/meshnodeenroller"
 	"git.novox.be/novox/mesh-contracts/identity-and-access/go/seats/meshvault"
-	"git.novox.be/novox/mesh-contracts/placement/go/clients/meshmoduleassignerclient"
-	"git.novox.be/novox/mesh-contracts/placement/go/clients/meshwantsclient"
-	"git.novox.be/novox/mesh-contracts/placement/go/seats/meshmoduleassigner"
 	"git.novox.be/novox/mesh-delivery/contracts/go/clients/meshcatalogclient"
+	"git.novox.be/novox/mesh-delivery/contracts/go/clients/meshwantsclient"
 	"git.novox.be/novox/mesh-delivery/contracts/go/seats/meshcatalog"
 	"git.novox.be/novox/mesh-delivery/modules/mesh-delivery-builder/builds"
 	"git.novox.be/novox/mesh-networking/modules/mesh-wireguard/go/overlay"
@@ -47,9 +47,9 @@ const (
 	ReadBuilds   = "mesh-delivery-builder.builds"
 	// ReadAccounts is the vault's bcrypt hashes of the bus accounts it holds, by bus user (ADR 0547 clause 9).
 	ReadAccounts = "mesh-vault.bus-accounts"
-	// ReadPlacement is the seat mesh-placement's placement (ADR 0567 §1, §9): each node's modules and the seats
+	// ReadAssignments is the seat mesh-module-assigner's assignments (ADR 0567 §1, §9): each node's modules and the seats
 	// they hold.
-	ReadPlacement = buscompose.PlacementRead
+	ReadAssignments = buscompose.AssignmentsRead
 	// ReadEnrolments is the seat mesh-enrolment's open enrolments, read as a named reader (ADR 0587 §2, §4): a key at
 	// live or redeeming composes the user enrol.<node>.
 	ReadEnrolments = buscompose.EnrolmentsRead
@@ -58,13 +58,13 @@ const (
 	ReadNodeLogins = buscompose.NodeLoginsRead
 )
 
-// Reads is every state the part reads, in the manifest's order. Not the controller's assignments: the seat's placement
+// Reads is every state the part reads, in the manifest's order. Not the controller's assignments: the seat's assignments
 // alone places modules (novox/hq ADR 0549 §5, ADR 0571 §10; issue 774).
 var Reads = []string{ReadResolved, ReadHave, ReadBuilds, ReadAccounts, ReadEnrolments, ReadNodeLogins}
 
 // ViewReads are the owners' states the part reads by their first views and views families, never their buckets
 // (firstviews.go, ADR 0615): each read in Reads' place.
-var ViewReads = []string{ReadModules, ReadManifests, ReadVerdicts, ReadWants, ReadPlacement}
+var ViewReads = []string{ReadModules, ReadManifests, ReadVerdicts, ReadWants, ReadAssignments}
 
 // The bus module's tools the part calls, as its manifest's invokes name them: read-only, each.
 const (
@@ -128,13 +128,13 @@ type resolved struct {
 
 // Inputs is what the shadow composes from, read from the bus.
 type Inputs struct {
-	// Nodes is every machine seen: in a node agent's have or the placement.
+	// Nodes is every machine seen: in a node agent's have or the assignments.
 	Nodes []string
-	// Assigned is what the seat's placement puts on each machine, sorted (issue 774: never the controller's assignments).
+	// Assigned is what the seat's assignments puts on each machine, sorted (issue 774: never the controller's assignments).
 	Assigned map[string][]string
-	// Placed is each node's placement as the seat mesh-placement holds it (ADR 0567 §1); empty before any is read.
-	// Where it is, a seat held once for the mesh is held where placement says, not wherever a module claiming it runs.
-	Placed map[string]meshmoduleassigner.Placement
+	// Placed is each node's assignments as the seat mesh-module-assigner holds it (ADR 0567 §1); empty before any is read.
+	// Where it is, a seat held once for the mesh is held where assignments says, not wherever a module claiming it runs.
+	Placed map[string]meshmoduleassigner.Assignments
 	// Manifests is each module's manifest at the indexer's trunk, by module.
 	Manifests map[string]catalogue.Manifest
 	// Bound is, by module, the streams of each bus-state entry the bus module said it created and has not dropped, from
@@ -318,33 +318,33 @@ func ReadInputs(r Reader, cache *Manifests) Inputs {
 		NoFingerprint: map[string]string{}, Running: map[string]catalogue.Manifest{},
 		Values: map[string]any{}, Gaps: append([]Gap(nil), standingGaps...)}
 	nodes := map[string]bool{}
-	// **The seat's placement alone places modules** (novox/hq ADR 0549 §5, ADR 0567 §9; issue 774): the controller's
+	// **The seat's assignments alone places modules** (novox/hq ADR 0549 §5, ADR 0567 §9; issue 774): the controller's
 	// assignments are read no more, and the seats held once for the mesh are held where it says. Not read is a failed
 	// read: nothing is placed, so the list composed past it is not sealed.
-	if keys, err := r.Keys(ReadPlacement); err != nil {
-		in.Gaps = append(in.Gaps, Gap{Input: ReadPlacement, Why: "refused or absent: nothing is placed (" + err.Error() + ")", Failed: true})
+	if keys, err := r.Keys(ReadAssignments); err != nil {
+		in.Gaps = append(in.Gaps, Gap{Input: ReadAssignments, Why: "refused or absent: nothing is placed (" + err.Error() + ")", Failed: true})
 	} else {
-		// Each node's keys in either form, assembled by the seat's one reader (meshmoduleassignerclient.PlacementsOf; research 072
-		// row 37): its node key and a key per module, or its legacy key `placement.<node>`.
+		// Each node's keys in either form, assembled by the seat's one reader (meshmoduleassignerclient.AssignmentsOf; research 072
+		// row 37): its node key and a key per module, or its legacy key `assignments.<node>`.
 		values := map[string][]byte{}
 		for _, k := range keys {
-			raw, found, err := r.Get(ReadPlacement, k)
+			raw, found, err := r.Get(ReadAssignments, k)
 			if err != nil || !found {
 				continue
 			}
 			if _, _, _, err := meshmoduleassignerclient.ParseKey(k); err != nil {
-				in.Gaps = append(in.Gaps, Gap{Input: ReadPlacement + " " + k, Why: "not a placement key, so it places nothing"})
+				in.Gaps = append(in.Gaps, Gap{Input: ReadAssignments + " " + k, Why: "not an assignments key, so it places nothing"})
 				continue
 			}
 			values[k] = raw
 		}
-		placed, err := meshmoduleassignerclient.PlacementsOf(values)
+		placed, err := meshmoduleassignerclient.AssignmentsOf(values)
 		if err != nil {
-			in.Gaps = append(in.Gaps, Gap{Input: ReadPlacement, Why: "a key does not read, so its node is composed from what does: " + err.Error()})
+			in.Gaps = append(in.Gaps, Gap{Input: ReadAssignments, Why: "a key does not read, so its node is composed from what does: " + err.Error()})
 		}
 		for node, p := range placed {
 			if in.Placed == nil {
-				in.Placed = map[string]meshmoduleassigner.Placement{}
+				in.Placed = map[string]meshmoduleassigner.Assignments{}
 			}
 			in.Placed[node] = p
 		}
@@ -372,7 +372,7 @@ func ReadInputs(r Reader, cache *Manifests) Inputs {
 			nodes[node] = true
 		}
 	}
-	in.Gaps = append(in.Gaps, Gap{Input: "machines", Why: "read from the node agents' haves and the placement: a machine with neither is not seen"})
+	in.Gaps = append(in.Gaps, Gap{Input: "machines", Why: "read from the node agents' haves and the assignments: a machine with neither is not seen"})
 	for n := range nodes {
 		in.Nodes = append(in.Nodes, n)
 	}

modules/mesh-grants/internal/grants/memberships.go

@@ -40,7 +40,7 @@ type Membership struct {
 // Memberships composes every assignment's membership from the records (buscompose.MembershipFor, as the controller's
 // parked composition pass, mesh-controller 003eee8a, issued them), by `<node>.<module>`. Pure.
 func Memberships(r buscompose.Records) map[string]Membership {
-	where := buscompose.PlacementsOf(r, r.Interchangeable)
+	where := buscompose.AssignmentsOf(r, r.Interchangeable)
 	out := map[string]Membership{}
 	for node, declared := range r.Assigned {
 		for _, d := range declared {

modules/mesh-grants/internal/grants/records.go

@@ -7,7 +7,7 @@ import (
 	"slices"
 	"strings"
 
-	"git.novox.be/novox/mesh-contracts/placement/go/seats/meshmoduleassigner"
+	"git.novox.be/novox/mesh-contracts/go/seats/meshmoduleassigner"
 	"git.novox.be/novox/mesh-sdk/go/catalogue"
 	"mesh-grants/internal/buscompose"
 )
@@ -408,14 +408,14 @@ func hearsOf(m catalogue.Manifest, declared map[string]catalogue.Manifest, node
 	return out, touches, onEvents
 }
 
-// heldWherePlaced is a module's holds on a node as the catalogue's placement says them (ADR 0549 §1, §3). A placement's
+// heldWherePlaced is a module's holds on a node as the catalogue's assignments says them (ADR 0549 §1, §3). The assignments'
 // holds are the holders on record, as catalogue.World's Holdings are: a seat held once for the mesh that some node's
-// placement holds is held only where a placement names it (this node's naming this module), so a module claiming it on
-// two machines holds it on the one placement names, not on both. A seat no placement holds is held by derivation, by the
-// module claiming it wherever it is placed, as it was before placement: the seeded placements hold only the seats the
+// assignments holds is held only where assignments names it (this node's naming this module), so a module claiming it on
+// two machines holds it on the one assignments names, not on both. A seat no assignments holds is held by derivation, by the
+// module claiming it wherever it is placed, as it was before assignments: the seeded assignments hold only the seats the
 // controller had on record (twelve on the control-node), and treating their holds as every holder left nine seats with
 // no holder in the user list of 2026-10-27 09:21 (issue 1945). A seat of every node is held wherever the module runs.
-func heldWherePlaced(holds []buscompose.Seat, placed map[string]meshmoduleassigner.Placement, node, module string) []buscompose.Seat {
+func heldWherePlaced(holds []buscompose.Seat, placed map[string]meshmoduleassigner.Assignments, node, module string) []buscompose.Seat {
 	same := func(x meshmoduleassigner.Holding, h buscompose.Seat) bool {
 		return (x.Scope == "" || x.Scope == catalogue.ScopeMesh) && sameSeat(x.Claim, h.Name) && x.Kind == h.Kind
 	}

modules/mesh-grants/internal/grants/userlist.go

@@ -239,7 +239,7 @@ type Comparison struct {
 	Shadow int `json:"shadow"`
 	Loaded int `json:"loaded"`
 	// Added are users in the shadow list the loaded list lacks (one left out for want of a credential among them);
-	// Dropped are loaded users the shadow list lacks; Gone are those of Dropped whose machine or module placement no
+	// Dropped are loaded users the shadow list lacks; Gone are those of Dropped whose machine or module assignments no
 	// longer names, which both lists agree are gone.
 	Added   []string   `json:"added"`
 	Dropped []string   `json:"dropped"`
@@ -277,7 +277,7 @@ func (c Comparison) Differing() []string {
 func (d UserDiff) responsesLost() bool { return strings.HasPrefix(d.Responses, "shadow false") }
 
 // Removing names every user that keeps the lists apart other than by a right the shadow list adds, each with how: a user
-// the shadow list adds, a loaded user it drops that placement still names, a publish or subscribe right a loaded user
+// the shadow list adds, a loaded user it drops that assignments still names, a publish or subscribe right a loaded user
 // would lose, or an allowance of responses lost (ADR 0562 §2). Empty when the lists agree or differ only by added rights.
 func (c Comparison) Removing() []string {
 	var out []string
@@ -286,7 +286,7 @@ func (c Comparison) Removing() []string {
 	}
 	for _, u := range c.Dropped {
 		if !slices.Contains(c.Gone, u) {
-			out = append(out, u+" (dropped, and placement still names it)")
+			out = append(out, u+" (dropped, and assignments still names it)")
 		}
 	}
 	for _, d := range c.Differ {
@@ -331,7 +331,7 @@ func (c Comparison) AddedRights() []UserDiff {
 	return out
 }
 
-// Compare compares the shadow list with the loaded one. placed says whether placement still names a loaded user's
+// Compare compares the shadow list with the loaded one. placed says whether assignments still names a loaded user's
 // machine and module; nil names every one. Pure.
 func Compare(shadow, loaded []User, placed func(user string) bool) Comparison {
 	c := Comparison{Shadow: len(shadow), Loaded: len(loaded), Added: []string{}, Dropped: []string{}, Differ: []UserDiff{}}
@@ -386,7 +386,7 @@ func minus(a, b []string) []string {
 	return out
 }
 
-// Placed says whether placement still names a user's machine and module: a machine's users (`node.<n>`,
+// Placed says whether assignments still names a user's machine and module: a machine's users (`node.<n>`,
 // `provisioner.<n>`) while the machine is seen, a module's or process's (`<n>.<module>[.<process>]`) while the module is
 // assigned there. The controller, enrolment users and persons are never judged gone from here.
 func Placed(in Inputs) func(user string) bool {
@@ -447,7 +447,7 @@ func (c Comparison) Excusing(f func(user, subject string, added, subscribe bool)
 var seatSubject = regexp.MustCompile(`^mesh\.seat\.([^.]+)\.(?:call|tool)\.([^.]+)(?:\.[^.]+)?$`)
 var seatService = regexp.MustCompile(`^\$SRV\.(?:INFO|PING|STATS)\.([^.]+)(?:\.>)?$`)
 
-// ExcusedBy is the excuse of a comparison until placement lives in the catalogue (the operator, 2026-10-26): a verb the
+// ExcusedBy is the excuse of a comparison until assignments lives in the catalogue (the operator, 2026-10-26): a verb the
 // seat catalogue retired on purpose, which the shadow no longer grants, is no difference; and what the shadow grants more
 // for a mesh seat that is claimed on several machines (the standing gap seat holdings: it composes the seat as held on each)
 // is named and not counted, for a user on a machine that claims the seat and only as a subscription (what it serves), since