8 Commits

Include renames

Author	SHA1	Message	Date
jschoubben	a78c5700fd	Grant a module's bus state asked in requires to the accounts that run its code ... The grants part wrote a binding into a membership on the bus module's created, but granted its subjects to no account but the ledger's, so distribution's program and the tool runner carrying it were refused their own key-value, object store and stream entries (issue 1966, ADR 0595 §1, design 25 § 12.2). The kept bindings now reach Declared in the same pass that writes them into the membership, and one function, boundOf, grants each to the module's own account and the tool runner, as its old section is granted; a process's bus.state names a key-value entry as an old state. The composed membership carries the bindings, so grants_membership's two sides agree. Claude-Session: https://claude.ai/code/session_01NcbgfFSnn24M3GcqttoU7i	2026-11-09 13:34:26 +01:00
jschoubben	66f31c8e97	Grant the bus keeper its account's information, which every bucket create asks first ... The keeper on novox (nats fea2c02b) has been refused $JS.API.INFO every 30 s since 21:58 UTC: the client library's CreateKeyValue asks the account's information before it creates a bucket, so each create of KV_distribution_* and KV_gitea_* timed out and the keeper never finished a fill pass (health failed). Read-only: the account's limits and usage, never a stream's data. Claude-Session: https://claude.ai/code/session_01NcbgfFfQ4Z9UE5jK32PmE5	2026-11-08 23:07:00 +01:00
jschoubben	986ab0396d	The verdict events are the seat mesh-catalog's: the indexer says manifest-accepted and manifest-refused on the seat's subject and no longer lists them in emits; builder, watchman and the grants part consume mesh-catalog.<event>, the bus module's keeper hears a watched seat's events (B7d finding 1; issue 1966) ... Claude-Session: https://claude.ai/code/session_01NcbgfFSnn24M3GcqttoU7i	2026-11-05 15:24:21 +01:00
jschoubben	1468743b73	Grants part: the claims' scopes and verbs come from the seat list catalogue holds (the host's), the seat names from the contracts, the enrolment seat is mesh-node-enroller in the part and its tests (D-30 first part, D-23; issue 1966) ... Claude-Session: https://claude.ai/code/session_01NcbgfFSnn24M3GcqttoU7i	2026-11-05 14:55:31 +01:00
jschoubben	bf8f5c5c25	mesh-grants: the bus module's process consumer hears the seat events said to it by name ... Its durable consumer filtered only its consumes, composed as module subjects, so the operator channel's decided for its own asks could not be heard there (design 25 § 12.3: it wakes on the warrant). Claude-Session: https://claude.ai/code/session_01JG73KJNrH5EgFXMKKYSrig	2026-11-04 17:11:53 +01:00
jschoubben	8a78e00bb0	DLV-G1, DLV-W1: the grants part and the watchman hear mesh-broker's events on the seat's subject; the keeper is granted them ... The lead's ruling of 13:0x (registry milestone): mesh-broker's events are mesh.seat.mesh-broker.event.<event> on the shared events stream like every seat's. The grants part and the watchman consume mesh-broker.<event> and no longer hear the bus module's own stream, which is its history for its tool. The keeper's process account is composed the seat's event subjects, and the acknowledgement of a snapshot's chunks of each entry it keeps, which ADR 0626 §1 grants and the composition lacked; a row holds it to no subscription of a restricted stream's subjects and no consumer of one. Claude-Session: https://claude.ai/code/session_01JG73KJNrH5EgFXMKKYSrig	2026-11-04 13:05:27 +01:00
jschoubben	5b68106662	DLV-G2: the bus module's process serves nothing, as every process account (ADR 0436 §3): it hears its module's consumes on a consumer of its own, says its stream's events and raises its conditions; the seat's reading verbs stay its module's tools' ... The keeper is asked by a person through its own state requests (CAT-N8); the acting verbs are served by nobody on the bus and denied to every principal whose grant reaches them. The bus module's tools bundle may read its module's own stream back (nats_history). Claude-Session: https://claude.ai/code/session_01JG73KJNrH5EgFXMKKYSrig	2026-11-04 12:34:50 +01:00
jschoubben	8f6562368c	DLV-G2: the bus module's process gets its own account: it defines every module's bus state by its names and an orphan's it created, serves mesh-broker's eight verbs, and no other account holds the acting four (ADR 0595 §4, §5) ... The grants are composed for the process of the module holding mesh-broker, from every manifest's bus-state entries and the streams of the bindings kept; the writers table names it beside the grants part as a definer of streams; the acting verbs are denied to every principal whose grant reaches them, and neither the holder's own account nor the tool runner serves the seat's verbs. Claude-Session: https://claude.ai/code/session_01JG73KJNrH5EgFXMKKYSrig	2026-11-04 12:34:50 +01:00