mesh-grants grants each provisioner client every machine's plans (issue 774) #116

2026-10-30T15:42:25Z

mesh-tools commented

2026-10-30 15:42:25 +00:00

Production fix, recovery of design 47's release (issue 774). Group fix/provisioner-reads-every-plan: mesh-sdk, mesh-delivery; merge mesh-sdk first.

Fault (live): the provisioner clients on g14 and shanks watch the seat's plans bucket whole to bind a provider's consumers (ADR 0373); the grant gave each only its own machine's keys, so the watch is refused and no files are placed.

Quick fix (chosen, recovery): plans join the buckets a client reads whole, as the assignments mirror already is: every key read, none written; a plan holds names and placement, never a secret value. Tests: the client may watch every plan and get another machine's; still writes none; the rows fail without the change. Thorough fix (queued): the client binds consumers from the seat's provision keys (ADR 0570 clause 3) and plans go back to its own machine's keys. Recovery mode: no check waited on; the operator merges by hand.

Reviewed-by: rev-plans@shanks at f800d672f3

Production fix, recovery of design 47's release (issue 774). Group fix/provisioner-reads-every-plan: mesh-sdk, mesh-delivery; merge mesh-sdk first. Fault (live): the provisioner clients on g14 and shanks watch the seat's plans bucket whole to bind a provider's consumers (ADR 0373); the grant gave each only its own machine's keys, so the watch is refused and no files are placed. Quick fix (chosen, recovery): plans join the buckets a client reads whole, as the assignments mirror already is: every key read, none written; a plan holds names and placement, never a secret value. Tests: the client may watch every plan and get another machine's; still writes none; the rows fail without the change. Thorough fix (queued): the client binds consumers from the seat's provision keys (ADR 0570 clause 3) and plans go back to its own machine's keys. Recovery mode: no check waited on; the operator merges by hand. Reviewed-by: rev-plans@shanks at f800d672f3440827569d72b053587f76086f29b9

mesh-tools added 1 commit 2026-10-30 15:42:26 +00:00

mesh-grants grants each provisioner client every machine's plans through mesh-sdk af66ccb, so g14 and shanks read their plans again (issue 774)

mesh/delivery merged: source.main moved to novox/mesh-delivery@33973d533825

Details

mesh/delivery-group group fix/provisioner-reads-every-plan merged: every member is merged

Details

mesh/check being carried to f800d672f344 on 98594c990287 | from mesh-sdk 42988a734b3d

f800d672f3

mesh-tools commented

2026-10-30 15:42:29 +00:00

Delivery novox/mesh-delivery@f800d672f344 — merged since 2026-10-30T15:53:44Z

Source — source.main moved to novox/mesh-delivery@33973d5338. Whether it reached the machines is mesh-delivery-view's, derived from source.main, the wants and the haves.

Group fix/provisioner-reads-every-plan: novox/mesh-delivery@f800d672f3, novox/mesh-sdk@af66ccb833

composed together: pass — the checker's verdict at the members' heads (92af08c2dcf9)

Transitions

2026-10-30 15:42 (new) → proposed (announced): novox/mesh-delivery#116's head announced
2026-10-30 15:42 proposed → ready (accepted): a verdict names this commit and the trunk's head as its trunk commit, the gate passed or warned, and the repository's own check did not fail; or the check gates no merge (check-gates-merge false)
2026-10-30 15:53 ready → merged (merged): on the trunk its modules follow: merged there

The commit's note under refs/notes/mesh-plan keeps every transition of this change up to its merge: git log --notes=mesh-plan.

**Delivery** `novox/mesh-delivery@f800d672f344` — **merged** since 2026-10-30T15:53:44Z **Source** — source.main moved to novox/mesh-delivery@33973d533825. Whether it reached the machines is `mesh-delivery-view`'s, derived from `source.main`, the wants and the haves. **Group** `fix/provisioner-reads-every-plan`: novox/mesh-delivery@f800d672f344, novox/mesh-sdk@af66ccb8335a - composed together: pass — the checker's verdict at the members' heads (92af08c2dcf9) **Transitions** - 2026-10-30 15:42 (new) → proposed (announced): novox/mesh-delivery#116's head announced - 2026-10-30 15:42 proposed → ready (accepted): a verdict names this commit and the trunk's head as its trunk commit, the gate passed or warned, and the repository's own check did not fail; or the check gates no merge (check-gates-merge false) - 2026-10-30 15:53 ready → merged (merged): on the trunk its modules follow: merged there The commit's note under `refs/notes/mesh-plan` keeps every transition of this change up to its merge: `git log --notes=mesh-plan`.

jschoubben merged commit 33973d5338 into main

2026-10-30 15:53:42 +00:00

jschoubben deleted branch fix/provisioner-reads-every-plan

2026-10-30 15:53:42 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: novox/mesh-delivery#116