Assigner rule 6 per node: a node is granted only when the grant names its own account (issue 1945 note 35) #46

2026-10-25T19:31:03Z

mesh-tools commented

2026-10-25 19:31:03 +00:00

Why

At 20:04 the grant for mesh-build-go at its fingerprint, written for g14, novox and shanks, let the assigner want ace although ace had no account on the bus; ace crash-looped.

What

A grant that names accounts grants a node only when it names that node's own account or one of its processes' accounts; a grant naming no accounts grants every node, as before.

Ship together

with the mesh-controller pull request of the same branch (sealed accounts, stale accounts forgotten, grants name sealed accounts only).

Tests

Cases inside existing table tests (no new test function); go test -race and go vet -tags integration pass. Recovery mode: no try; merge by hand.

Issue: issue 1945 note 35.

Reviewed-by: reviewer-seal@shanks at 61196c99e6

## Why At 20:04 the grant for mesh-build-go at its fingerprint, written for g14, novox and shanks, let the assigner want ace although ace had no account on the bus; ace crash-looped. ## What A grant that names accounts grants a node only when it names that node's own account or one of its processes' accounts; a grant naming no accounts grants every node, as before. ## Ship together with the mesh-controller pull request of the same branch (sealed accounts, stale accounts forgotten, grants name sealed accounts only). ## Tests Cases inside existing table tests (no new test function); go test -race and go vet -tags integration pass. Recovery mode: no try; merge by hand. Issue: issue 1945 note 35. Reviewed-by: reviewer-seal@shanks at 61196c99e6a49bb42143fee56aafc2d697662274

mesh-tools added 1 commit 2026-10-25 19:31:03 +00:00

Hold a node's want until the grant names its account (issue 1945, rule 6 per node)

mesh/delivery-group group fix/1945-credential-when-row-without-seal held: a member is held: novox/mesh-controller@fbf14b68dbab (merged without a passing check:…

Details

mesh/delivery held for a person: merged without a passing check: only a person decides what follows

Details

mesh/check pass 61196c99e6a4 on 5ba6881f9fd3 | unit 163 run, 421 kept | integration 173 run, 487 kept | composition passed on ace

61196c99e6

Rule 6 read only whether a grant of the module's fingerprint existed. A grant
written for the module's other nodes then let a node whose account was never
issued or sealed be wanted: on 2026-10-25 at 20:04 ace's mesh-build-go was
wanted with no ace.mesh-build-go on the bus, and crash-looped 20 times for
its missing credential. A grant that names accounts now grants a node only
when it names that node's own or a process's account; one that names none
grants every node, as before.
Research 072: the grants piece (memberships and credentials heard from placement).

mesh-tools commented

2026-10-25 19:31:08 +00:00

Delivery novox/mesh-delivery@61196c99e6a4 — held since 2026-10-25T19:31:54Z

Held for a person: merged without a passing check: only a person decides what follows — the merge reached the trunk without a passing check.

Source — source.main moved to novox/mesh-delivery@5ba6881f9f. Whether it reached the machines is mesh-delivery-view's, derived from source.main, the wants and the haves.

Group fix/1945-credential-when-row-without-seal: novox/mesh-controller@fbf14b68db, novox/mesh-delivery@61196c99e6

Transitions

2026-10-25 19:31 (new) → proposed (announced): novox/mesh-delivery#46's head announced
2026-10-25 19:31 proposed → held (merged-unchecked): merged without a passing check — a verdict known with it is taken first: only a person decides what follows

The commit's note under refs/notes/mesh-plan keeps every transition of this change up to its merge: git log --notes=mesh-plan.

**Delivery** `novox/mesh-delivery@61196c99e6a4` — **held** since 2026-10-25T19:31:54Z Held for a person: merged without a passing check: only a person decides what follows — the merge reached the trunk without a passing check. **Source** — source.main moved to novox/mesh-delivery@5ba6881f9fd3. Whether it reached the machines is `mesh-delivery-view`'s, derived from `source.main`, the wants and the haves. **Group** `fix/1945-credential-when-row-without-seal`: novox/mesh-controller@fbf14b68dbab, novox/mesh-delivery@61196c99e6a4 **Transitions** - 2026-10-25 19:31 (new) → proposed (announced): novox/mesh-delivery#46's head announced - 2026-10-25 19:31 proposed → held (merged-unchecked): merged without a passing check — a verdict known with it is taken first: only a person decides what follows The commit's note under `refs/notes/mesh-plan` keeps every transition of this change up to its merge: `git log --notes=mesh-plan`.

jschoubben merged commit 5ba6881f9f into main

2026-10-25 19:31:51 +00:00

jschoubben deleted branch fix/1945-credential-when-row-without-seal

2026-10-25 19:31:51 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: novox/mesh-delivery#46