L3: mesh-grants writes the wanted accounts and grants, the checker's try seat, placement alone after the lease (issue 774, ADR 0561), rebased onto L2 #105

2026-10-28T20:56:44Z

mesh-tools commented

2026-10-28 20:56:44 +00:00

L3 (issue 774, ADR 0561), rebased onto L2.

Group member with mesh-catalog, mesh-host and hq on feat/774-vault-mints-l2. The builder, checker, indexer, view and mesh-grants pin mesh-sdk 8eafc0c exactly; the assigner pins mesh-sdk 76f7c4d (mesh-sdk #127's head, holding 8eafc0c and 77b48a4).

Under L2: the builder, checker, indexer and view read mesh-delivery-assigner.placement; the seat's Leased is the controller's lease handed away (ProposeIn.Leased, in propose, adopt, lay-again and seed-again; hand-back refused after it); the view drops the indexer placement read L2 removed. Rebased again onto main with #102-#104 (the checker's recovery tools beside the seat's try tools).

Merged main (#104, #106) in; the conflict in seat_tools_test.go was resolved and confirmed. Merged main (#107) in at 2caaa6f (pin conflict only). At 64d364a the assigner's pin moves from main's merge commit d747c11 to 76f7c4d: the checker refuses a pin to a merge commit as on no pull request. Assigner vet (+integration tag) and unit tests pass.

Tests: 583 unit, 76 integration (approved head: 583, 76).

Reviewed-by: rev-l2@shanks at 64d364a768

L3 (issue 774, ADR 0561), rebased onto L2. Group member with mesh-catalog, mesh-host and hq on feat/774-vault-mints-l2. The builder, checker, indexer, view and mesh-grants pin mesh-sdk 8eafc0c exactly; the assigner pins mesh-sdk 76f7c4d (mesh-sdk #127's head, holding 8eafc0c and 77b48a4). Under L2: the builder, checker, indexer and view read mesh-delivery-assigner.placement; the seat's Leased is the controller's lease handed away (ProposeIn.Leased, in propose, adopt, lay-again and seed-again; hand-back refused after it); the view drops the indexer placement read L2 removed. Rebased again onto main with #102-#104 (the checker's recovery tools beside the seat's try tools). Merged main (#104, #106) in; the conflict in seat_tools_test.go was resolved and confirmed. Merged main (#107) in at 2caaa6f (pin conflict only). At 64d364a the assigner's pin moves from main's merge commit d747c11 to 76f7c4d: the checker refuses a pin to a merge commit as on no pull request. Assigner vet (+integration tag) and unit tests pass. Tests: 583 unit, 76 integration (approved head: 583, 76). Reviewed-by: rev-l2@shanks at 64d364a7686c7fb193b58c18f6cfffdc4cb35594

mesh-tools added 23 commits 2026-10-28 20:56:44 +00:00

mesh-grants: write the bus accounts the mesh wants to a state only the vault reads, so the vault can mint them; grants_accounts reads it (issue 774, ADR 0561 §2, §9) 71aa3e86c6

mesh-grants: compose the user list again when the vault says account-issued, so a minted account reaches the bus within one pass (issue 774, ADR 0561 §1) 3c6fb7fc9e

mesh-grants: create the durable consumers an account needs from the lease write, compared in shadow until then, so a module assigned after the controller leaves still hears what it consumes (issue 774, ADR 0561 §6) ebad58f7e2

mesh-grants: raise a condition when an account consumer differs from its composed configuration, and bring one to it by hand with grants_consumer_match, never under the controller's lease (issue 774, ADR 0561 §6, §9) 9b31746cdb

mesh-grants: grants_accounts reads the account consumers' differences in shadow, where no condition is raised (issue 774, ADR 0561 §6, §9) 67e3ebf22f

mesh-grants: hold a list that changes several loaded users' hashes at once with no rotation by the vault naming them, and raise user-list-held naming them (issue 774, ADR 0561 §7) eb11b2c844

mesh-grants: grants_accept_hashes releases the clause 7 hold once, for exactly the held users of the held list, with why, said as hashes-accepted (issue 774, ADR 0561 §7, §9) 6d709e1fc1

mesh-delivery-checker claims its seat and serves try, try-read and try-end by the tools' own code, so the try outlives the controller (ADR 0547 §10, issue 774) fc6d5dcbdb

Fold the seat verbs' test into the try tools test; pin the sdk head (issue 774) 843a1589d7

mesh-grants: write grants.<module>.<fp> in shadow into the state grants, say grant-written, and show every difference from the controller's in grants_grants (issue 774, ADR 0547 §5) 3618831992

Why: the assigner switches its grants source when the controller's lease is handed away; until then the written keys are compared with the controller's, so the switch rests on a measured equality. Needs the group's mesh-sdk pin (PartGrantKey) before it builds.

mesh-delivery-assigner: read grants from the source the lease names (issue 774, ADR 0547 §4) 354b9ea396

Why: from the lease write the grants part's state grants is the source and the controller's bucket otherwise; the assigner follows the lease key (a pass only when the source changes), and neither bucket stops its start. Needs the group's mesh-sdk pin (GrantSource, LeaseHandedAway, the assigner a named reader of the lease).

mesh-grants: say every placed module left without a grant, in the pass and as the condition mesh-grants.grant-missing once the lease is handed away (issue 1126, ADR 0547 §5) 6f721dd536

Why: the controller's grant writer skipped link2pay, snake, f1-circuits and txt-game in silence (it read the fingerprint by
their unchanged commit, a build of the old form) and the take-in said 'its grant written'. The part already reads the
fingerprint from the indexer's value, so those four are granted at their src2 done key's fingerprint; a row proves it.
What a pass leaves without a grant (no fingerprint of the new form with the indexer's none2, a refused manifest, no
hashed account) is now said rather than passed over. Quick: log it. Thorough (chosen): the pass's Missing, shown by the
grants tool, and a warning condition raised and cleared on change, as consumer-differs is.

Builder, checker and indexer count a build node's toolchain only where the catalogue's placement puts its build module, through mesh-sdk's one gate, and read the controller's assignments no more (issue 774, ADR 0549 §3, issue 1940) a4116a1de7

The view shows a row per module the catalogue's placement puts on a node, and reads the controller's assignments no more (issue 774, ADR 0549 §3) 9a70d697af

The assigner reads the catalogue's placement alone once the controller's lease is handed away, and reads the lease to know it (issue 774, ADR 0549 §5, §6) 9e3d1d5e68

mesh-delivery-view: node_trusts answers in one call whether every node's record names the vault's signing key, the gate before the controller's lease is handed away (issue 774, ADR 0550 §2, design 47 L3 s6b) 1dbb7c5740

Pin mesh-sdk 277a5bd, the L3 group's head, in the assigner, builder, checker, indexer, view and grants; the assigner's manifest test names mesh-grants.grants, its integration test no unused import (issue 774) 68628bfd78

mesh-grants: the node-engine's manifest is placed on every node, so its declared state is asserted and created as a placed module's, and it adds no account (issue 774, ADR 0563 §2, §3) 8e25926e91

mesh-grants: place by the catalogue's placement alone once the controller's lease is handed away, and refuse any other reader of the assignments in this repository (issue 774, ADR 0549 §3, §6) 685810720e

Why: after the lease write the assignments are frozen, so the part's union kept a module the catalogue takes off a node
with its account, grant, membership and user-list entry. The lease is read as the assigner reads it
(buscompose.LeaseHandedAway); before it, or with no placement on the bus, the union stands. The read stays declared until
the first change after the lease write, named in modules/assignments-readers with the assigner; a TestGrants row refuses
any other module.json that reads mesh-controller.assignments, as mesh-catalog's checks/placement does for the catalogue.

Pin mesh-sdk 4e6e5cc, the L3 group's head rebased on L2, in the six modules the group changes (issue 774) 2abceb1913

Follow L2 under L3: the builder, checker, indexer and view read the seat mesh-placement's placement, the seat's Leased is the lease handed away, and the view keeps no read of the indexer's placement L2 removed (issue 774, ADR 0567 §8, ADR 0549 §3) b2351a213d

The assigner's laying again and its seed again know the lease write too, so a proposal laid again after it is judged as its first laying was (issue 774, ADR 0567 §8; re-review) 09da8d741e

Pin mesh-sdk 8eafc0c, the L3 group's head on mesh-sdk main with #120 and #121 (issue 774)

mesh/delivery-group group feat/774-vault-mints-l2 checking: the checker's verdict is out of date: novox/mesh-sdk@8eafc0c5ce3c was judged on trunk 53f26493697e,…

Details

mesh/delivery closed: a newer head of the same pull request

Details

mesh/check checking 7692f201df51 on 5b2e5bc53776 | novox/mesh-delivery#105 in group feat/774-vault-mints-l2

7692f201df

mesh-tools commented

2026-10-28 20:56:50 +00:00

Delivery novox/mesh-delivery@64d364a7686c — ready since 2026-10-28T23:20:07Z

Group feat/774-vault-mints-l2: novox/hq@7d022710b3, novox/mesh-catalog@c193d2b389, novox/mesh-delivery@64d364a768, novox/mesh-host@9bd1c84e0f

Transitions

2026-10-28 23:20 (new) → proposed (announced): novox/mesh-delivery#105's head announced
2026-10-28 23:20 proposed → ready (accepted): a verdict names this commit and the trunk's head as its trunk commit, the gate passed or warned, and the repository's own check did not fail; or the check gates no merge (check-gates-merge false)

The commit's note under refs/notes/mesh-plan keeps every transition of this change up to its merge: git log --notes=mesh-plan.

**Delivery** `novox/mesh-delivery@64d364a7686c` — **ready** since 2026-10-28T23:20:07Z **Group** `feat/774-vault-mints-l2`: novox/hq@7d022710b34b, novox/mesh-catalog@c193d2b38970, novox/mesh-delivery@64d364a7686c, novox/mesh-host@9bd1c84e0f4c **Transitions** - 2026-10-28 23:20 (new) → proposed (announced): novox/mesh-delivery#105's head announced - 2026-10-28 23:20 proposed → ready (accepted): a verdict names this commit and the trunk's head as its trunk commit, the gate passed or warned, and the repository's own check did not fail; or the check gates no merge (check-gates-merge false) The commit's note under `refs/notes/mesh-plan` keeps every transition of this change up to its merge: `git log --notes=mesh-plan`.

jschoubben added 1 commit 2026-10-28 22:00:07 +00:00

Merge remote-tracking branch 'origin/main' into l3r/774-vault-mints

mesh/delivery-group group feat/774-vault-mints-l2 rejected: composed together: the checker's verdict at the members' heads (1c492872d414): shanks

Details

mesh/delivery closed: a newer head of the same pull request

Details

mesh/check failed: shanks: novox/mesh-delivery#105 does not merge into the trunk: files in conflict: modules/mesh-delivery-assigner/go.mod, modules/me…

f6df07605d

# Conflicts:
#	modules/mesh-delivery-assigner/cmd/mesh-delivery-assigner/seat_tools_test.go

mesh-tools commented

2026-10-28 22:21:34 +00:00

mesh-delivery: the operator's Approve of this pull request's merge into main is ended: a head it covers moved on: the heads it covers are no longer the group's heads. Nothing is merged on it. The operator is asked again once the checks pass at the new head.

jschoubben added 1 commit 2026-10-28 22:50:46 +00:00

Merge main into L3: the assigner pins mesh-sdk main d747c11, which holds both L3's sdk and the seed's held-as-today fix (issue 774)

mesh/check failed: ace: the check of novox/mesh-host#168 failed: the pin of git.novox.be/novox/mesh-sdk/go at commit d4c61ee8ffd0 is on no pull reques…

mesh/delivery closed: a newer head of the same pull request

Details

mesh/delivery-group group feat/774-vault-mints-l2 checking: 3 of 4 member(s) ready

Details

2caaa6fc92

mesh-tools commented

2026-10-28 22:50:52 +00:00

mesh-delivery: the operator's Approve of this pull request's merge into main is ended: a head it covers moved on: the heads it covers are no longer the group's heads. Nothing is merged on it. The operator is asked again once the checks pass at the new head.

jschoubben added 1 commit 2026-10-28 23:20:04 +00:00

Assigner pins mesh-sdk 76f7c4d, a pull request's head holding 8eafc0c and 77b48a4: the checker refuses a pin to a merge commit on main (issue 774)

mesh/delivery ready: it is merged on the Approve

Details

mesh/check failed: the composition: the manifest of mesh-delivery-checker cannot be read: this manifest cannot be used: | 64d364a7686c on fa075dc880af…

mesh/delivery-group group feat/774-vault-mints-l2 rejected: composed together: the checker's verdict at the members' heads (d9a0e4aec26c): the composition

Details

64d364a768

mesh-tools commented

2026-10-28 23:20:08 +00:00

mesh-delivery: the operator's Approve of this pull request's merge into main is ended: a head it covers moved on: the heads it covers are no longer the group's heads. Nothing is merged on it. The operator is asked again once the checks pass at the new head.

mesh-tools referenced this pull request

2026-10-28 23:36:57 +00:00

Assigner pins mesh-sdk 76f7c4d, which defines the seat mesh-delivery-checker, so L3's check can compose (issue 774) #108

mesh-tools commented

2026-10-28 23:37:45 +00:00

mesh-delivery: not merged. The merge of this pull request into main at 64d364a768 was declined: the operator, via telegram (user id verified), chose Decline. A new head asks the operator again.

mesh-delivery: **not merged.** The merge of this pull request into main at 64d364a7686c7fb193b58c18f6cfffdc4cb35594 was declined: the operator, via telegram (user id verified), chose Decline. A new head asks the operator again.

Some required checks failed

mesh/delivery ready: it is merged on the Approve

Details

mesh/check failed: the composition: the manifest of mesh-delivery-checker cannot be read: this manifest cannot be used: | 64d364a7686c on fa075dc880af…

mesh/delivery-group group feat/774-vault-mints-l2 rejected: composed together: the checker's verdict at the members' heads (d9a0e4aec26c): the composition

Details

You are not authorized to merge this pull request.

This pull request can be merged automatically.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin feat/774-vault-mints-l2:feat/774-vault-mints-l2

git checkout feat/774-vault-mints-l2

Sign in to join this conversation.

2 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: novox/mesh-delivery#105