Fixes issue 1820: the checker sent a build step to a node that was not heard (a laptop asleep, not yet marked offline) and failed the check with 'no responders'.
What changes:
A step whose call reached nobody (no responders, or no answer within the call's bound) leaves that node out for the rest of the judging and goes to another node of the same build module. A step after the fetch makes its workspace again on the new node first.
When no node answers, the check fails naming every node tried, with the words of a failure of the nodes, so it is judged again when the nodes change.
A step that began and failed, and a check that ended, are never moved.
A failed read of a go.mod from the forge with no responders is put at the forge, not at a build node.
The checker chooses one node per step, so no two-node digest agreement is made there; that part of the issue has no code in the checker.
Tests: modules/mesh-delivery-checker internal/check/heard_test.go and cmd/mesh-delivery-checker/heard_test.go (labels 1820/AC1 to AC6). mesh-controller.try on bbb42d704c passed (1m16s).
Fixes issue 1820: the checker sent a build step to a node that was not heard (a laptop asleep, not yet marked offline) and failed the check with 'no responders'.
What changes:
- A step whose call reached nobody (no responders, or no answer within the call's bound) leaves that node out for the rest of the judging and goes to another node of the same build module. A step after the fetch makes its workspace again on the new node first.
- When no node answers, the check fails naming every node tried, with the words of a failure of the nodes, so it is judged again when the nodes change.
- A step that began and failed, and a check that ended, are never moved.
- A failed read of a go.mod from the forge with no responders is put at the forge, not at a build node.
- The checker chooses one node per step, so no two-node digest agreement is made there; that part of the issue has no code in the checker.
Tests: modules/mesh-delivery-checker internal/check/heard_test.go and cmd/mesh-delivery-checker/heard_test.go (labels 1820/AC1 to AC6). mesh-controller.try on bbb42d704ce0 passed (1m16s).
Reviewed-by: reviewer-1820@shanks at bbb42d704ce064c97db88339feae9e81e72eb010
mesh/check pass bbb42d704ce0 on 5b09d1ccb52d | unit 354 run 0 kept | int 392 run 0 kept | clone 8.7s unit 199ms int 7.1s+44s | composition not yet run
mesh/merge-gate head bbb42d704ce0 merged into trunk 5b09d1ccb52d — pass: builds mesh-delivery-checker → novox; no bus step; every machine composes with the…
Deliverynovox/mesh-delivery@bbb42d704ce0 — delivered since 2026-10-22T08:38:39Z
Delivery plan — builds mesh-delivery-checker → novox; no bus step
tier 0: mesh-delivery-checker
novox: receives mesh-delivery-checker
Machines
mesh-delivery-checker on every machine running it: sent
Transitions
2026-10-22 08:06 (new) → proposed (announced): novox/mesh-delivery#19's head announced
2026-10-22 08:11 proposed → checked (checked): a verdict names this commit and the trunk's head as its trunk commit
2026-10-22 08:11 checked → ready (accepted): the gate passed or warned, and the repository's own check did not fail
2026-10-22 08:30 ready → proposed (trunk moved): out of date: judged against trunk 113f7aa933, the trunk is now 5b09d1ccb52d; judged again on a recheck or when it is merged
2026-10-22 08:36 proposed → checked (checked): a verdict names this commit and the trunk's head as its trunk commit
2026-10-22 08:36 checked → ready (accepted): the gate passed or warned, and the repository's own check did not fail
2026-10-22 08:36 ready → published (merged): on the trunk its modules follow: merged there, and its walk opened — or nothing for a walk to move
2026-10-22 08:36 published → delivering (go): its walk started: let go by this owner in its group's order, by a person, or on the controller's own path — not a failed walk that carried a later commit for it, after which it waits for a walk of its own commit
2026-10-22 08:38 delivering → delivered (done): its walk is done, carrying its own commit: every machine of its deploy plan passed, or was left as its policy says
The commit's note under refs/notes/mesh-plan keeps every transition: git log --notes=mesh-plan.
<!-- mesh-delivery:view -->
**Delivery** `novox/mesh-delivery@bbb42d704ce0` — **delivered** since 2026-10-22T08:38:39Z
**Delivery plan** — builds mesh-delivery-checker → novox; no bus step
- tier 0: mesh-delivery-checker
- novox: receives mesh-delivery-checker
**Machines**
- mesh-delivery-checker on every machine running it: sent
**Transitions**
- 2026-10-22 08:06 (new) → proposed (announced): novox/mesh-delivery#19's head announced
- 2026-10-22 08:11 proposed → checked (checked): a verdict names this commit and the trunk's head as its trunk commit
- 2026-10-22 08:11 checked → ready (accepted): the gate passed or warned, and the repository's own check did not fail
- 2026-10-22 08:30 ready → proposed (trunk moved): out of date: judged against trunk 113f7aa93385, the trunk is now 5b09d1ccb52d; judged again on a recheck or when it is merged
- 2026-10-22 08:36 proposed → checked (checked): a verdict names this commit and the trunk's head as its trunk commit
- 2026-10-22 08:36 checked → ready (accepted): the gate passed or warned, and the repository's own check did not fail
- 2026-10-22 08:36 ready → published (merged): on the trunk its modules follow: merged there, and its walk opened — or nothing for a walk to move
- 2026-10-22 08:36 published → delivering (go): its walk started: let go by this owner in its group's order, by a person, or on the controller's own path — not a failed walk that carried a later commit for it, after which it waits for a walk of its own commit
- 2026-10-22 08:38 delivering → delivered (done): its walk is done, carrying its own commit: every machine of its deploy plan passed, or was left as its policy says
The commit's note under `refs/notes/mesh-plan` keeps every transition: `git log --notes=mesh-plan`.
Merge check at bbb42d70
Judged: head bbb42d704ce0 merged into trunk 113f7aa93385; read beside it: mesh-catalog 97a111e70abf, mesh-controller 3d4ad6fefb7c, mesh-controller-main 3d4ad6fefb7c, mesh-host 4065b45ae84f, mesh-tools e0fadc43d9dd
mesh/merge-gate: PASS — every machine composes with the change as it did without (4 of 4 compose) (modules: mesh-delivery-checker)
mesh/repo-check: PASS — its merge-check.sh passed
Delivery plan — builds mesh-delivery-checker → novox; no bus step
tier 0: mesh-delivery-checker
novox: receives mesh-delivery-checker
read by no module's build: modules/mesh-delivery-checker/cmd/mesh-delivery-checker/heard_test.go, modules/mesh-delivery-checker/internal/check/heard_test.go
Run by the build seat on shanks as build-1792656372691985774 (builds --log build-1792656372691985774).
--- the gate: mesh-delivery-checker
mesh-delivery-checker: ok, 3 tool(s), invokes gitea.gitea_commits, gitea.gitea_compare, gitea.gitea_get_file, mesh-build-go.build_go_digest, mesh-build-go.build_go_fetch, mesh-build-go.build_go_test, mesh-build-node.build_node_fetch, mesh-build-node.build_node_test, keeps state kept, owed, previews, verdicts, reads mesh-build-go.steps, mesh-build-go.toolchains, mesh-build-node.steps, mesh-build-node.toolchains, mesh-controller.plans-building, mesh-delivery-builder.builds, mesh-delivery-gate.source, mesh-delivery-indexer.candidates, mesh-delivery-indexer.manifests, mesh-delivery-indexer.modules, mesh-delivery-watchman.presence, node-engine.have, ready: checker by unit every 30s
long-running resources without health: 0
files asking for a setting without saying whether it is trusted: 0
1 manifest(s) checked. Judged against the seats this binary carries; a claim on one of the mesh's own seats is judged fully at registration, and a seat declared by a module not given here reads as unknown. Identities judged on a 6-character machine name, against the bounds of the providers given here
judging 0 module(s) changed against 4 machine(s), as the snapshot of 2026-10-22T06:41:56Z says they run
composing every machine as the mesh is
HELD: the vault did not answer for the core's credentials on f35; sealed by the controller until the vault holds it: mesh-provisioner-client — own/f35/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on idt; sealed by the controller until the vault holds it: mesh-provisioner-client — own/idt/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on ygcyr; sealed by the controller until the vault holds it: mesh-provisioner, mesh-provisioner-client, nats — own/ygcyr/mesh-provisioner/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/nats/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
the bus's user list leaves out 8 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, ygcyr.mesh-mail.send, ygcyr.only-office.converter, node.yvbpsm, yvbpsm.brother.device. Each is a user that cannot connect until one is issued
HELD: the vault did not answer for the core's credentials on yvbpsm; sealed by the controller until the vault holds it: mesh-provisioner-client — own/yvbpsm/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on f35; sealed by the controller until the vault holds it: mesh-provisioner-client — own/f35/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on idt; sealed by the controller until the vault holds it: mesh-provisioner-client — own/idt/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on ygcyr; sealed by the controller until the vault holds it: mesh-provisioner, mesh-provisioner-client, nats — own/ygcyr/mesh-provisioner/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/nats/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
the bus's user list leaves out 8 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, ygcyr.mesh-mail.send, ygcyr.only-office.converter, node.yvbpsm, yvbpsm.brother.device. Each is a user that cannot connect until one is issued
HELD: the vault did not answer for the core's credentials on yvbpsm; sealed by the controller until the vault holds it: mesh-provisioner-client — own/yvbpsm/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
composing every machine with the change
HELD: the vault did not answer for the core's credentials on f35; sealed by the controller until the vault holds it: mesh-provisioner-client — own/f35/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on idt; sealed by the controller until the vault holds it: mesh-provisioner-client — own/idt/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on ygcyr; sealed by the controller until the vault holds it: mesh-provisioner, mesh-provisioner-client, nats — own/ygcyr/mesh-provisioner/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/nats/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
the bus's user list leaves out 8 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, ygcyr.mesh-mail.send, ygcyr.only-office.converter, node.yvbpsm, yvbpsm.brother.device. Each is a user that cannot connect until one is issued
HELD: the vault did not answer for the core's credentials on yvbpsm; sealed by the controller until the vault holds it: mesh-provisioner-client — own/yvbpsm/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on f35; sealed by the controller until the vault holds it: mesh-provisioner-client — own/f35/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on idt; sealed by the controller until the vault holds it: mesh-provisioner-client — own/idt/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on ygcyr; sealed by the controller until the vault holds it: mesh-provisioner, mesh-provisioner-client, nats — own/ygcyr/mesh-provisioner/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/nats/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
the bus's user list leaves out 8 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, ygcyr.mesh-mail.send, ygcyr.only-office.converter, node.yvbpsm, yvbpsm.brother.device. Each is a user that cannot connect until one is issued
HELD: the vault did not answer for the core's credentials on yvbpsm; sealed by the controller until the vault holds it: mesh-provisioner-client — own/yvbpsm/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
merge gate: PASS — every machine composes with the change as it did without (4 of 4 compose)
judged by controller development build against the facts of 2026-10-22T06:41:56Z
machines:
- a machine (f35): composes
- holds mesh-dns-resolver (idt): composes
- holds git, holds mesh-artifact-store, holds mesh-broker, holds mesh-catalog, holds mesh-config, holds mesh-delivery, holds mesh-dns-resolver, holds mesh-provisioner, holds mesh-store, holds mesh-vault, holds npm-package-registry, the control node, the hub (ygcyr): composes
- a machine (yvbpsm): composes
a merge would rebuild 1 module(s) in 1 tier(s): mesh-delivery-checker
notes:
- modules/mesh-delivery-checker/cmd/mesh-delivery-checker/heard_test.go and modules/mesh-delivery-checker/internal/check/heard_test.go read by no module's build, and rebuild nothing (issue 280)
--- its merge-check.sh (go toolchain)
== ./modules/mesh-delivery-builder: go vet and the unit tests
ok mesh-delivery-builder 0.003s
ok mesh-delivery-builder/cmd/mesh-delivery-builder (cached)
ok mesh-delivery-builder/internal/build (cached)
== ./modules/mesh-delivery-builder: the integration tests (-tags integration)
ok mesh-delivery-builder 0.003s
ok mesh-delivery-builder/cmd/mesh-delivery-builder 2.427s
ok mesh-delivery-builder/internal/build (cached)
== ./modules/mesh-delivery-checker: go vet and the unit tests
ok mesh-delivery-checker 0.004s
ok mesh-delivery-checker/cmd/mesh-delivery-checker 0.007s
ok mesh-delivery-checker/cmd/mesh-delivery-checker-tools (cached)
ok mesh-delivery-checker/internal/check 0.042s
== ./modules/mesh-delivery-checker: the integration tests (-tags integration)
ok mesh-delivery-checker 0.004s
ok mesh-delivery-checker/cmd/mesh-delivery-checker 3.165s
ok mesh-delivery-checker/cmd/mesh-delivery-checker-tools (cached)
ok mesh-delivery-checker/internal/check 0.042s
== ./modules/mesh-delivery-forge-bridge: go vet and the unit tests
ok mesh-delivery-forge-bridge 0.003s
ok mesh-delivery-forge-bridge/cmd/mesh-delivery-forge-bridge (cached)
ok mesh-delivery-forge-bridge/internal/bridge 0.198s
== ./modules/mesh-delivery-forge-bridge: the integration tests (-tags integration)
ok mesh-delivery-forge-bridge 0.003s
ok mesh-delivery-forge-bridge/cmd/mesh-delivery-forge-bridge 4.287s
ok mesh-delivery-forge-bridge/internal/bridge 0.199s
== ./modules/mesh-delivery-indexer: go vet and the unit tests
ok mesh-delivery-indexer 0.003s
ok mesh-delivery-indexer/cmd/mesh-delivery-indexer (cached)
ok mesh-delivery-indexer/internal/index 0.056s
== ./modules/mesh-delivery-indexer: the integration tests (-tags integration)
ok mesh-delivery-indexer 0.004s
ok mesh-delivery-indexer/cmd/mesh-delivery-indexer 0.831s
ok mesh-delivery-indexer/internal/index 0.057s
== ./modules/mesh-delivery-teller: go vet and the unit tests
ok mesh-delivery-teller 0.003s
ok mesh-delivery-teller/cmd/mesh-delivery-teller (cached)
== ./modules/mesh-delivery-teller: the integration tests (-tags integration)
ok mesh-delivery-teller 0.003s
ok mesh-delivery-teller/cmd/mesh-delivery-teller (cached)
== ./modules/mesh-delivery-view: go vet and the unit tests
ok mesh-delivery-view 0.003s
ok mesh-delivery-view/cmd/mesh-delivery-cli (cached)
ok mesh-delivery-view/cmd/mesh-delivery-view (cached)
ok mesh-delivery-view/cmd/mesh-delivery-view-tools (cached)
ok mesh-delivery-view/internal/view (cached)
== ./modules/mesh-delivery-view: the integration tests (-tags integration)
ok mesh-delivery-view 0.003s
ok mesh-delivery-view/cmd/mesh-delivery-cli (cached)
ok mesh-delivery-view/cmd/mesh-delivery-view (cached)
ok mesh-delivery-view/cmd/mesh-delivery-view-tools (cached)
ok mesh-delivery-view/internal/view (cached)
== ./modules/mesh-delivery-watchman: go vet and the unit tests
ok mesh-delivery-watchman 0.003s
ok mesh-delivery-watchman/cmd/mesh-delivery-watchman (cached)
ok mesh-delivery-watchman/internal/watch (cached)
== ./modules/mesh-delivery-watchman: the integration tests (-tags integration)
ok mesh-delivery-watchman 0.003s
ok mesh-delivery-watchman/cmd/mesh-delivery-watchman (cached)
ok mesh-delivery-watchman/internal/watch (cached)
**Merge check** at `bbb42d70`
Judged: head `bbb42d704ce0` merged into trunk `113f7aa93385`; read beside it: mesh-catalog `97a111e70abf`, mesh-controller `3d4ad6fefb7c`, mesh-controller-main `3d4ad6fefb7c`, mesh-host `4065b45ae84f`, mesh-tools `e0fadc43d9dd`
- `mesh/merge-gate`: **PASS** — every machine composes with the change as it did without (4 of 4 compose) (modules: mesh-delivery-checker)
- `mesh/repo-check`: **PASS** — its merge-check.sh passed
**Delivery plan** — builds mesh-delivery-checker → novox; no bus step
- tier 0: mesh-delivery-checker
- novox: receives mesh-delivery-checker
- read by no module's build: modules/mesh-delivery-checker/cmd/mesh-delivery-checker/heard_test.go, modules/mesh-delivery-checker/internal/check/heard_test.go
Run by the build seat on shanks as `build-1792656372691985774` (`builds --log build-1792656372691985774`).
```
--- the gate: mesh-delivery-checker
mesh-delivery-checker: ok, 3 tool(s), invokes gitea.gitea_commits, gitea.gitea_compare, gitea.gitea_get_file, mesh-build-go.build_go_digest, mesh-build-go.build_go_fetch, mesh-build-go.build_go_test, mesh-build-node.build_node_fetch, mesh-build-node.build_node_test, keeps state kept, owed, previews, verdicts, reads mesh-build-go.steps, mesh-build-go.toolchains, mesh-build-node.steps, mesh-build-node.toolchains, mesh-controller.plans-building, mesh-delivery-builder.builds, mesh-delivery-gate.source, mesh-delivery-indexer.candidates, mesh-delivery-indexer.manifests, mesh-delivery-indexer.modules, mesh-delivery-watchman.presence, node-engine.have, ready: checker by unit every 30s
long-running resources without health: 0
files asking for a setting without saying whether it is trusted: 0
1 manifest(s) checked. Judged against the seats this binary carries; a claim on one of the mesh's own seats is judged fully at registration, and a seat declared by a module not given here reads as unknown. Identities judged on a 6-character machine name, against the bounds of the providers given here
judging 0 module(s) changed against 4 machine(s), as the snapshot of 2026-10-22T06:41:56Z says they run
composing every machine as the mesh is
HELD: the vault did not answer for the core's credentials on f35; sealed by the controller until the vault holds it: mesh-provisioner-client — own/f35/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on idt; sealed by the controller until the vault holds it: mesh-provisioner-client — own/idt/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on ygcyr; sealed by the controller until the vault holds it: mesh-provisioner, mesh-provisioner-client, nats — own/ygcyr/mesh-provisioner/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/nats/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
the bus's user list leaves out 8 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, ygcyr.mesh-mail.send, ygcyr.only-office.converter, node.yvbpsm, yvbpsm.brother.device. Each is a user that cannot connect until one is issued
HELD: the vault did not answer for the core's credentials on yvbpsm; sealed by the controller until the vault holds it: mesh-provisioner-client — own/yvbpsm/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on f35; sealed by the controller until the vault holds it: mesh-provisioner-client — own/f35/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on idt; sealed by the controller until the vault holds it: mesh-provisioner-client — own/idt/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on ygcyr; sealed by the controller until the vault holds it: mesh-provisioner, mesh-provisioner-client, nats — own/ygcyr/mesh-provisioner/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/nats/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
the bus's user list leaves out 8 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, ygcyr.mesh-mail.send, ygcyr.only-office.converter, node.yvbpsm, yvbpsm.brother.device. Each is a user that cannot connect until one is issued
HELD: the vault did not answer for the core's credentials on yvbpsm; sealed by the controller until the vault holds it: mesh-provisioner-client — own/yvbpsm/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
composing every machine with the change
HELD: the vault did not answer for the core's credentials on f35; sealed by the controller until the vault holds it: mesh-provisioner-client — own/f35/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on idt; sealed by the controller until the vault holds it: mesh-provisioner-client — own/idt/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on ygcyr; sealed by the controller until the vault holds it: mesh-provisioner, mesh-provisioner-client, nats — own/ygcyr/mesh-provisioner/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/nats/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
the bus's user list leaves out 8 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, ygcyr.mesh-mail.send, ygcyr.only-office.converter, node.yvbpsm, yvbpsm.brother.device. Each is a user that cannot connect until one is issued
HELD: the vault did not answer for the core's credentials on yvbpsm; sealed by the controller until the vault holds it: mesh-provisioner-client — own/yvbpsm/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on f35; sealed by the controller until the vault holds it: mesh-provisioner-client — own/f35/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on idt; sealed by the controller until the vault holds it: mesh-provisioner-client — own/idt/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on ygcyr; sealed by the controller until the vault holds it: mesh-provisioner, mesh-provisioner-client, nats — own/ygcyr/mesh-provisioner/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/nats/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
the bus's user list leaves out 8 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, ygcyr.mesh-mail.send, ygcyr.only-office.converter, node.yvbpsm, yvbpsm.brother.device. Each is a user that cannot connect until one is issued
HELD: the vault did not answer for the core's credentials on yvbpsm; sealed by the controller until the vault holds it: mesh-provisioner-client — own/yvbpsm/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
merge gate: PASS — every machine composes with the change as it did without (4 of 4 compose)
judged by controller development build against the facts of 2026-10-22T06:41:56Z
machines:
- a machine (f35): composes
- holds mesh-dns-resolver (idt): composes
- holds git, holds mesh-artifact-store, holds mesh-broker, holds mesh-catalog, holds mesh-config, holds mesh-delivery, holds mesh-dns-resolver, holds mesh-provisioner, holds mesh-store, holds mesh-vault, holds npm-package-registry, the control node, the hub (ygcyr): composes
- a machine (yvbpsm): composes
a merge would rebuild 1 module(s) in 1 tier(s): mesh-delivery-checker
notes:
- modules/mesh-delivery-checker/cmd/mesh-delivery-checker/heard_test.go and modules/mesh-delivery-checker/internal/check/heard_test.go read by no module's build, and rebuild nothing (issue 280)
--- its merge-check.sh (go toolchain)
== ./modules/mesh-delivery-builder: go vet and the unit tests
ok mesh-delivery-builder 0.003s
ok mesh-delivery-builder/cmd/mesh-delivery-builder (cached)
ok mesh-delivery-builder/internal/build (cached)
== ./modules/mesh-delivery-builder: the integration tests (-tags integration)
ok mesh-delivery-builder 0.003s
ok mesh-delivery-builder/cmd/mesh-delivery-builder 2.427s
ok mesh-delivery-builder/internal/build (cached)
== ./modules/mesh-delivery-checker: go vet and the unit tests
ok mesh-delivery-checker 0.004s
ok mesh-delivery-checker/cmd/mesh-delivery-checker 0.007s
ok mesh-delivery-checker/cmd/mesh-delivery-checker-tools (cached)
ok mesh-delivery-checker/internal/check 0.042s
== ./modules/mesh-delivery-checker: the integration tests (-tags integration)
ok mesh-delivery-checker 0.004s
ok mesh-delivery-checker/cmd/mesh-delivery-checker 3.165s
ok mesh-delivery-checker/cmd/mesh-delivery-checker-tools (cached)
ok mesh-delivery-checker/internal/check 0.042s
== ./modules/mesh-delivery-forge-bridge: go vet and the unit tests
ok mesh-delivery-forge-bridge 0.003s
ok mesh-delivery-forge-bridge/cmd/mesh-delivery-forge-bridge (cached)
ok mesh-delivery-forge-bridge/internal/bridge 0.198s
== ./modules/mesh-delivery-forge-bridge: the integration tests (-tags integration)
ok mesh-delivery-forge-bridge 0.003s
ok mesh-delivery-forge-bridge/cmd/mesh-delivery-forge-bridge 4.287s
ok mesh-delivery-forge-bridge/internal/bridge 0.199s
== ./modules/mesh-delivery-indexer: go vet and the unit tests
ok mesh-delivery-indexer 0.003s
ok mesh-delivery-indexer/cmd/mesh-delivery-indexer (cached)
ok mesh-delivery-indexer/internal/index 0.056s
== ./modules/mesh-delivery-indexer: the integration tests (-tags integration)
ok mesh-delivery-indexer 0.004s
ok mesh-delivery-indexer/cmd/mesh-delivery-indexer 0.831s
ok mesh-delivery-indexer/internal/index 0.057s
== ./modules/mesh-delivery-teller: go vet and the unit tests
ok mesh-delivery-teller 0.003s
ok mesh-delivery-teller/cmd/mesh-delivery-teller (cached)
== ./modules/mesh-delivery-teller: the integration tests (-tags integration)
ok mesh-delivery-teller 0.003s
ok mesh-delivery-teller/cmd/mesh-delivery-teller (cached)
== ./modules/mesh-delivery-view: go vet and the unit tests
ok mesh-delivery-view 0.003s
ok mesh-delivery-view/cmd/mesh-delivery-cli (cached)
ok mesh-delivery-view/cmd/mesh-delivery-view (cached)
ok mesh-delivery-view/cmd/mesh-delivery-view-tools (cached)
ok mesh-delivery-view/internal/view (cached)
== ./modules/mesh-delivery-view: the integration tests (-tags integration)
ok mesh-delivery-view 0.003s
ok mesh-delivery-view/cmd/mesh-delivery-cli (cached)
ok mesh-delivery-view/cmd/mesh-delivery-view (cached)
ok mesh-delivery-view/cmd/mesh-delivery-view-tools (cached)
ok mesh-delivery-view/internal/view (cached)
== ./modules/mesh-delivery-watchman: go vet and the unit tests
ok mesh-delivery-watchman 0.003s
ok mesh-delivery-watchman/cmd/mesh-delivery-watchman (cached)
ok mesh-delivery-watchman/internal/watch (cached)
== ./modules/mesh-delivery-watchman: the integration tests (-tags integration)
ok mesh-delivery-watchman 0.003s
ok mesh-delivery-watchman/cmd/mesh-delivery-watchman (cached)
ok mesh-delivery-watchman/internal/watch (cached)
```
Merge check at bbb42d70
Judged: head bbb42d704ce0 merged into trunk 5b09d1ccb52d; read beside it: mesh-catalog 848249cf54b6, mesh-controller 3d4ad6fefb7c, mesh-controller-main 3d4ad6fefb7c, mesh-host 4065b45ae84f, mesh-tools e0fadc43d9dd
mesh/merge-gate: PASS — every machine composes with the change as it did without (4 of 4 compose) (modules: mesh-delivery-checker)
mesh/repo-check: PASS — its merge-check.sh passed
Delivery plan — builds mesh-delivery-checker → novox; no bus step
tier 0: mesh-delivery-checker
novox: receives mesh-delivery-checker
read by no module's build: modules/mesh-delivery-checker/cmd/mesh-delivery-checker/heard_test.go, modules/mesh-delivery-checker/internal/check/heard_test.go
Run by the build seat on shanks as build-1792657857209560916 (builds --log build-1792657857209560916).
--- the gate: mesh-delivery-checker
mesh-delivery-checker: ok, 3 tool(s), invokes gitea.gitea_commits, gitea.gitea_compare, gitea.gitea_get_file, mesh-build-go.build_go_digest, mesh-build-go.build_go_fetch, mesh-build-go.build_go_test, mesh-build-node.build_node_fetch, mesh-build-node.build_node_test, keeps state kept, owed, previews, verdicts, reads mesh-build-go.steps, mesh-build-go.toolchains, mesh-build-node.steps, mesh-build-node.toolchains, mesh-controller.plans-building, mesh-delivery-builder.builds, mesh-delivery-gate.source, mesh-delivery-indexer.candidates, mesh-delivery-indexer.manifests, mesh-delivery-indexer.modules, mesh-delivery-watchman.presence, node-engine.have, ready: checker by unit every 30s
long-running resources without health: 0
files asking for a setting without saying whether it is trusted: 0
1 manifest(s) checked. Judged against the seats this binary carries; a claim on one of the mesh's own seats is judged fully at registration, and a seat declared by a module not given here reads as unknown. Identities judged on a 6-character machine name, against the bounds of the providers given here
judging 0 module(s) changed against 4 machine(s), as the snapshot of 2026-10-22T06:41:56Z says they run
composing every machine as the mesh is
HELD: the vault did not answer for the core's credentials on f35; sealed by the controller until the vault holds it: mesh-provisioner-client — own/f35/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on idt; sealed by the controller until the vault holds it: mesh-provisioner-client — own/idt/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on ygcyr; sealed by the controller until the vault holds it: mesh-provisioner, mesh-provisioner-client, nats — own/ygcyr/mesh-provisioner/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/nats/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
the bus's user list leaves out 8 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, ygcyr.mesh-mail.send, ygcyr.only-office.converter, node.yvbpsm, yvbpsm.brother.device. Each is a user that cannot connect until one is issued
HELD: the vault did not answer for the core's credentials on yvbpsm; sealed by the controller until the vault holds it: mesh-provisioner-client — own/yvbpsm/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on f35; sealed by the controller until the vault holds it: mesh-provisioner-client — own/f35/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on idt; sealed by the controller until the vault holds it: mesh-provisioner-client — own/idt/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on ygcyr; sealed by the controller until the vault holds it: mesh-provisioner, mesh-provisioner-client, nats — own/ygcyr/mesh-provisioner/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/nats/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
the bus's user list leaves out 8 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, ygcyr.mesh-mail.send, ygcyr.only-office.converter, node.yvbpsm, yvbpsm.brother.device. Each is a user that cannot connect until one is issued
HELD: the vault did not answer for the core's credentials on yvbpsm; sealed by the controller until the vault holds it: mesh-provisioner-client — own/yvbpsm/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
composing every machine with the change
HELD: the vault did not answer for the core's credentials on f35; sealed by the controller until the vault holds it: mesh-provisioner-client — own/f35/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on idt; sealed by the controller until the vault holds it: mesh-provisioner-client — own/idt/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on ygcyr; sealed by the controller until the vault holds it: mesh-provisioner, mesh-provisioner-client, nats — own/ygcyr/mesh-provisioner/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/nats/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
the bus's user list leaves out 8 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, ygcyr.mesh-mail.send, ygcyr.only-office.converter, node.yvbpsm, yvbpsm.brother.device. Each is a user that cannot connect until one is issued
HELD: the vault did not answer for the core's credentials on yvbpsm; sealed by the controller until the vault holds it: mesh-provisioner-client — own/yvbpsm/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on f35; sealed by the controller until the vault holds it: mesh-provisioner-client — own/f35/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on idt; sealed by the controller until the vault holds it: mesh-provisioner-client — own/idt/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on ygcyr; sealed by the controller until the vault holds it: mesh-provisioner, mesh-provisioner-client, nats — own/ygcyr/mesh-provisioner/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/nats/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
the bus's user list leaves out 8 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, ygcyr.mesh-mail.send, ygcyr.only-office.converter, node.yvbpsm, yvbpsm.brother.device. Each is a user that cannot connect until one is issued
HELD: the vault did not answer for the core's credentials on yvbpsm; sealed by the controller until the vault holds it: mesh-provisioner-client — own/yvbpsm/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
merge gate: PASS — every machine composes with the change as it did without (4 of 4 compose)
judged by controller development build against the facts of 2026-10-22T06:41:56Z
machines:
- a machine (f35): composes
- holds mesh-dns-resolver (idt): composes
- holds git, holds mesh-artifact-store, holds mesh-broker, holds mesh-catalog, holds mesh-config, holds mesh-delivery, holds mesh-dns-resolver, holds mesh-provisioner, holds mesh-store, holds mesh-vault, holds npm-package-registry, the control node, the hub (ygcyr): composes
- a machine (yvbpsm): composes
a merge would rebuild 1 module(s) in 1 tier(s): mesh-delivery-checker
notes:
- modules/mesh-delivery-checker/cmd/mesh-delivery-checker/heard_test.go and modules/mesh-delivery-checker/internal/check/heard_test.go read by no module's build, and rebuild nothing (issue 280)
--- its merge-check.sh (go toolchain)
== ./modules/mesh-delivery-builder: go vet and the unit tests
ok mesh-delivery-builder 0.003s
ok mesh-delivery-builder/cmd/mesh-delivery-builder (cached)
ok mesh-delivery-builder/internal/build (cached)
== ./modules/mesh-delivery-builder: the integration tests (-tags integration)
ok mesh-delivery-builder 0.004s
ok mesh-delivery-builder/cmd/mesh-delivery-builder 2.420s
ok mesh-delivery-builder/internal/build (cached)
== ./modules/mesh-delivery-checker: go vet and the unit tests
ok mesh-delivery-checker 0.004s
ok mesh-delivery-checker/cmd/mesh-delivery-checker 0.007s
ok mesh-delivery-checker/cmd/mesh-delivery-checker-tools (cached)
ok mesh-delivery-checker/internal/check 0.043s
== ./modules/mesh-delivery-checker: the integration tests (-tags integration)
ok mesh-delivery-checker 0.004s
ok mesh-delivery-checker/cmd/mesh-delivery-checker 3.159s
ok mesh-delivery-checker/cmd/mesh-delivery-checker-tools (cached)
ok mesh-delivery-checker/internal/check 0.043s
== ./modules/mesh-delivery-forge-bridge: go vet and the unit tests
ok mesh-delivery-forge-bridge 0.003s
ok mesh-delivery-forge-bridge/cmd/mesh-delivery-forge-bridge (cached)
ok mesh-delivery-forge-bridge/internal/bridge 0.198s
== ./modules/mesh-delivery-forge-bridge: the integration tests (-tags integration)
ok mesh-delivery-forge-bridge 0.003s
ok mesh-delivery-forge-bridge/cmd/mesh-delivery-forge-bridge 4.236s
ok mesh-delivery-forge-bridge/internal/bridge 0.199s
== ./modules/mesh-delivery-indexer: go vet and the unit tests
ok mesh-delivery-indexer 0.003s
ok mesh-delivery-indexer/cmd/mesh-delivery-indexer (cached)
ok mesh-delivery-indexer/internal/index 0.057s
== ./modules/mesh-delivery-indexer: the integration tests (-tags integration)
ok mesh-delivery-indexer 0.005s
ok mesh-delivery-indexer/cmd/mesh-delivery-indexer 0.842s
ok mesh-delivery-indexer/internal/index 0.056s
== ./modules/mesh-delivery-teller: go vet and the unit tests
ok mesh-delivery-teller 0.003s
ok mesh-delivery-teller/cmd/mesh-delivery-teller (cached)
== ./modules/mesh-delivery-teller: the integration tests (-tags integration)
ok mesh-delivery-teller 0.004s
ok mesh-delivery-teller/cmd/mesh-delivery-teller (cached)
== ./modules/mesh-delivery-view: go vet and the unit tests
ok mesh-delivery-view 0.003s
ok mesh-delivery-view/cmd/mesh-delivery-cli 0.005s
ok mesh-delivery-view/cmd/mesh-delivery-view 0.003s
ok mesh-delivery-view/cmd/mesh-delivery-view-tools 0.003s
ok mesh-delivery-view/internal/view 0.008s
== ./modules/mesh-delivery-view: the integration tests (-tags integration)
ok mesh-delivery-view 0.003s
ok mesh-delivery-view/cmd/mesh-delivery-cli 0.005s
ok mesh-delivery-view/cmd/mesh-delivery-view 10.522s
ok mesh-delivery-view/cmd/mesh-delivery-view-tools 0.003s
ok mesh-delivery-view/internal/view 0.008s
== ./modules/mesh-delivery-watchman: go vet and the unit tests
ok mesh-delivery-watchman 0.003s
ok mesh-delivery-watchman/cmd/mesh-delivery-watchman (cached)
ok mesh-delivery-watchman/internal/watch (cached)
== ./modules/mesh-delivery-watchman: the integration tests (-tags integration)
ok mesh-delivery-watchman 0.003s
ok mesh-delivery-watchman/cmd/mesh-delivery-watchman (cached)
ok mesh-delivery-watchman/internal/watch (cached)
**Merge check** at `bbb42d70`
Judged: head `bbb42d704ce0` merged into trunk `5b09d1ccb52d`; read beside it: mesh-catalog `848249cf54b6`, mesh-controller `3d4ad6fefb7c`, mesh-controller-main `3d4ad6fefb7c`, mesh-host `4065b45ae84f`, mesh-tools `e0fadc43d9dd`
- `mesh/merge-gate`: **PASS** — every machine composes with the change as it did without (4 of 4 compose) (modules: mesh-delivery-checker)
- `mesh/repo-check`: **PASS** — its merge-check.sh passed
**Delivery plan** — builds mesh-delivery-checker → novox; no bus step
- tier 0: mesh-delivery-checker
- novox: receives mesh-delivery-checker
- read by no module's build: modules/mesh-delivery-checker/cmd/mesh-delivery-checker/heard_test.go, modules/mesh-delivery-checker/internal/check/heard_test.go
Run by the build seat on shanks as `build-1792657857209560916` (`builds --log build-1792657857209560916`).
```
--- the gate: mesh-delivery-checker
mesh-delivery-checker: ok, 3 tool(s), invokes gitea.gitea_commits, gitea.gitea_compare, gitea.gitea_get_file, mesh-build-go.build_go_digest, mesh-build-go.build_go_fetch, mesh-build-go.build_go_test, mesh-build-node.build_node_fetch, mesh-build-node.build_node_test, keeps state kept, owed, previews, verdicts, reads mesh-build-go.steps, mesh-build-go.toolchains, mesh-build-node.steps, mesh-build-node.toolchains, mesh-controller.plans-building, mesh-delivery-builder.builds, mesh-delivery-gate.source, mesh-delivery-indexer.candidates, mesh-delivery-indexer.manifests, mesh-delivery-indexer.modules, mesh-delivery-watchman.presence, node-engine.have, ready: checker by unit every 30s
long-running resources without health: 0
files asking for a setting without saying whether it is trusted: 0
1 manifest(s) checked. Judged against the seats this binary carries; a claim on one of the mesh's own seats is judged fully at registration, and a seat declared by a module not given here reads as unknown. Identities judged on a 6-character machine name, against the bounds of the providers given here
judging 0 module(s) changed against 4 machine(s), as the snapshot of 2026-10-22T06:41:56Z says they run
composing every machine as the mesh is
HELD: the vault did not answer for the core's credentials on f35; sealed by the controller until the vault holds it: mesh-provisioner-client — own/f35/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on idt; sealed by the controller until the vault holds it: mesh-provisioner-client — own/idt/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on ygcyr; sealed by the controller until the vault holds it: mesh-provisioner, mesh-provisioner-client, nats — own/ygcyr/mesh-provisioner/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/nats/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
the bus's user list leaves out 8 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, ygcyr.mesh-mail.send, ygcyr.only-office.converter, node.yvbpsm, yvbpsm.brother.device. Each is a user that cannot connect until one is issued
HELD: the vault did not answer for the core's credentials on yvbpsm; sealed by the controller until the vault holds it: mesh-provisioner-client — own/yvbpsm/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on f35; sealed by the controller until the vault holds it: mesh-provisioner-client — own/f35/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on idt; sealed by the controller until the vault holds it: mesh-provisioner-client — own/idt/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on ygcyr; sealed by the controller until the vault holds it: mesh-provisioner, mesh-provisioner-client, nats — own/ygcyr/mesh-provisioner/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/nats/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
the bus's user list leaves out 8 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, ygcyr.mesh-mail.send, ygcyr.only-office.converter, node.yvbpsm, yvbpsm.brother.device. Each is a user that cannot connect until one is issued
HELD: the vault did not answer for the core's credentials on yvbpsm; sealed by the controller until the vault holds it: mesh-provisioner-client — own/yvbpsm/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
composing every machine with the change
HELD: the vault did not answer for the core's credentials on f35; sealed by the controller until the vault holds it: mesh-provisioner-client — own/f35/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on idt; sealed by the controller until the vault holds it: mesh-provisioner-client — own/idt/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on ygcyr; sealed by the controller until the vault holds it: mesh-provisioner, mesh-provisioner-client, nats — own/ygcyr/mesh-provisioner/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/nats/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
the bus's user list leaves out 8 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, ygcyr.mesh-mail.send, ygcyr.only-office.converter, node.yvbpsm, yvbpsm.brother.device. Each is a user that cannot connect until one is issued
HELD: the vault did not answer for the core's credentials on yvbpsm; sealed by the controller until the vault holds it: mesh-provisioner-client — own/yvbpsm/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on f35; sealed by the controller until the vault holds it: mesh-provisioner-client — own/f35/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on idt; sealed by the controller until the vault holds it: mesh-provisioner-client — own/idt/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
HELD: the vault did not answer for the core's credentials on ygcyr; sealed by the controller until the vault holds it: mesh-provisioner, mesh-provisioner-client, nats — own/ygcyr/mesh-provisioner/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus; own/ygcyr/nats/broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
the bus's user list leaves out 8 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, ygcyr.mesh-mail.send, ygcyr.only-office.converter, node.yvbpsm, yvbpsm.brother.device. Each is a user that cannot connect until one is issued
HELD: the vault did not answer for the core's credentials on yvbpsm; sealed by the controller until the vault holds it: mesh-provisioner-client — own/yvbpsm/mesh-provisioner-client/provisioner-broker: this control plane has no MESH_BUS_NATS, so it cannot reach the mesh's bus
merge gate: PASS — every machine composes with the change as it did without (4 of 4 compose)
judged by controller development build against the facts of 2026-10-22T06:41:56Z
machines:
- a machine (f35): composes
- holds mesh-dns-resolver (idt): composes
- holds git, holds mesh-artifact-store, holds mesh-broker, holds mesh-catalog, holds mesh-config, holds mesh-delivery, holds mesh-dns-resolver, holds mesh-provisioner, holds mesh-store, holds mesh-vault, holds npm-package-registry, the control node, the hub (ygcyr): composes
- a machine (yvbpsm): composes
a merge would rebuild 1 module(s) in 1 tier(s): mesh-delivery-checker
notes:
- modules/mesh-delivery-checker/cmd/mesh-delivery-checker/heard_test.go and modules/mesh-delivery-checker/internal/check/heard_test.go read by no module's build, and rebuild nothing (issue 280)
--- its merge-check.sh (go toolchain)
== ./modules/mesh-delivery-builder: go vet and the unit tests
ok mesh-delivery-builder 0.003s
ok mesh-delivery-builder/cmd/mesh-delivery-builder (cached)
ok mesh-delivery-builder/internal/build (cached)
== ./modules/mesh-delivery-builder: the integration tests (-tags integration)
ok mesh-delivery-builder 0.004s
ok mesh-delivery-builder/cmd/mesh-delivery-builder 2.420s
ok mesh-delivery-builder/internal/build (cached)
== ./modules/mesh-delivery-checker: go vet and the unit tests
ok mesh-delivery-checker 0.004s
ok mesh-delivery-checker/cmd/mesh-delivery-checker 0.007s
ok mesh-delivery-checker/cmd/mesh-delivery-checker-tools (cached)
ok mesh-delivery-checker/internal/check 0.043s
== ./modules/mesh-delivery-checker: the integration tests (-tags integration)
ok mesh-delivery-checker 0.004s
ok mesh-delivery-checker/cmd/mesh-delivery-checker 3.159s
ok mesh-delivery-checker/cmd/mesh-delivery-checker-tools (cached)
ok mesh-delivery-checker/internal/check 0.043s
== ./modules/mesh-delivery-forge-bridge: go vet and the unit tests
ok mesh-delivery-forge-bridge 0.003s
ok mesh-delivery-forge-bridge/cmd/mesh-delivery-forge-bridge (cached)
ok mesh-delivery-forge-bridge/internal/bridge 0.198s
== ./modules/mesh-delivery-forge-bridge: the integration tests (-tags integration)
ok mesh-delivery-forge-bridge 0.003s
ok mesh-delivery-forge-bridge/cmd/mesh-delivery-forge-bridge 4.236s
ok mesh-delivery-forge-bridge/internal/bridge 0.199s
== ./modules/mesh-delivery-indexer: go vet and the unit tests
ok mesh-delivery-indexer 0.003s
ok mesh-delivery-indexer/cmd/mesh-delivery-indexer (cached)
ok mesh-delivery-indexer/internal/index 0.057s
== ./modules/mesh-delivery-indexer: the integration tests (-tags integration)
ok mesh-delivery-indexer 0.005s
ok mesh-delivery-indexer/cmd/mesh-delivery-indexer 0.842s
ok mesh-delivery-indexer/internal/index 0.056s
== ./modules/mesh-delivery-teller: go vet and the unit tests
ok mesh-delivery-teller 0.003s
ok mesh-delivery-teller/cmd/mesh-delivery-teller (cached)
== ./modules/mesh-delivery-teller: the integration tests (-tags integration)
ok mesh-delivery-teller 0.004s
ok mesh-delivery-teller/cmd/mesh-delivery-teller (cached)
== ./modules/mesh-delivery-view: go vet and the unit tests
ok mesh-delivery-view 0.003s
ok mesh-delivery-view/cmd/mesh-delivery-cli 0.005s
ok mesh-delivery-view/cmd/mesh-delivery-view 0.003s
ok mesh-delivery-view/cmd/mesh-delivery-view-tools 0.003s
ok mesh-delivery-view/internal/view 0.008s
== ./modules/mesh-delivery-view: the integration tests (-tags integration)
ok mesh-delivery-view 0.003s
ok mesh-delivery-view/cmd/mesh-delivery-cli 0.005s
ok mesh-delivery-view/cmd/mesh-delivery-view 10.522s
ok mesh-delivery-view/cmd/mesh-delivery-view-tools 0.003s
ok mesh-delivery-view/internal/view 0.008s
== ./modules/mesh-delivery-watchman: go vet and the unit tests
ok mesh-delivery-watchman 0.003s
ok mesh-delivery-watchman/cmd/mesh-delivery-watchman (cached)
ok mesh-delivery-watchman/internal/watch (cached)
== ./modules/mesh-delivery-watchman: the integration tests (-tags integration)
ok mesh-delivery-watchman 0.003s
ok mesh-delivery-watchman/cmd/mesh-delivery-watchman (cached)
ok mesh-delivery-watchman/internal/watch (cached)
```
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Fixes issue 1820: the checker sent a build step to a node that was not heard (a laptop asleep, not yet marked offline) and failed the check with 'no responders'.
What changes:
Tests: modules/mesh-delivery-checker internal/check/heard_test.go and cmd/mesh-delivery-checker/heard_test.go (labels 1820/AC1 to AC6). mesh-controller.try on
bbb42d704cpassed (1m16s).Reviewed-by: reviewer-1820@shanks at
bbb42d704cDelivery
novox/mesh-delivery@bbb42d704ce0— delivered since 2026-10-22T08:38:39ZDelivery plan — builds mesh-delivery-checker → novox; no bus step
Machines
Transitions
113f7aa933, the trunk is now 5b09d1ccb52d; judged again on a recheck or when it is mergedThe commit's note under
refs/notes/mesh-plankeeps every transition:git log --notes=mesh-plan.Merge check at
bbb42d70Judged: head
bbb42d704ce0merged into trunk113f7aa93385; read beside it: mesh-catalog97a111e70abf, mesh-controller3d4ad6fefb7c, mesh-controller-main3d4ad6fefb7c, mesh-host4065b45ae84f, mesh-toolse0fadc43d9ddmesh/merge-gate: PASS — every machine composes with the change as it did without (4 of 4 compose) (modules: mesh-delivery-checker)mesh/repo-check: PASS — its merge-check.sh passedDelivery plan — builds mesh-delivery-checker → novox; no bus step
Run by the build seat on shanks as
build-1792656372691985774(builds --log build-1792656372691985774).Merge check at
bbb42d70Judged: head
bbb42d704ce0merged into trunk5b09d1ccb52d; read beside it: mesh-catalog848249cf54b6, mesh-controller3d4ad6fefb7c, mesh-controller-main3d4ad6fefb7c, mesh-host4065b45ae84f, mesh-toolse0fadc43d9ddmesh/merge-gate: PASS — every machine composes with the change as it did without (4 of 4 compose) (modules: mesh-delivery-checker)mesh/repo-check: PASS — its merge-check.sh passedDelivery plan — builds mesh-delivery-checker → novox; no bus step
Run by the build seat on shanks as
build-1792657857209560916(builds --log build-1792657857209560916).