mesh-grants keeps what the bus loaded while it composes only part of the mesh (issue 1966, bootstrap recovery) #171

Merged

mesh-tools merged 2 commits from fix/1966-grants-keeps-what-is-loaded into main 2026-11-07 22:35:24 +00:00

Conversation 1 Commits 2 Files Changed 6

+420 -15

2 Commits

Author	SHA1	Message	Date
jschoubben	ab2bbe9ff6	mesh-grants: a partial pass keeps every deny and every published membership ... Review round 1 of issue 1966's keep-what-is-loaded fix. - KeepLoaded intersected the denies, and the composer gives every composed user an empty deny, so a user in force with a wide publish and a deny was sealed with no deny. The union of every deny any list says is kept now, and Losses counts a deny dropped. - A pass composing part of the mesh (the seat list unread, or placed by the haves) no longer narrows a published membership: one whose published value serves, hears or gives more than the pass composes is kept as published and said so (not_published), so a tool runner or a seat holder goes on serving what it serves while keeping its login. Claude-Session: https://claude.ai/code/session_01NcbgfFfQ4Z9UE5jK32PmE5	2026-11-07 23:33:07 +01:00
jschoubben	dead64ee6e	mesh-grants: a pass composing part of the mesh keeps what the bus loaded ... Issue 1966: the list sealed 2026-11-07 23:09, composed while the seat list was unread (only the bootstrapped seats compose), took the node seats from the tool runners, the vault's reads from the node-engines and the seat queues from the build modules, and left out ledger.novox.mesh-knowledge. - While the seat list is unread (the gate's MayAct with no seat) or a pass is placed by the haves, each user of the loaded list and of the list in force is sealed with the union of what the pass composes and what those lists give it (publish, subscribe, responses; a deny only where every list saying one denies it), kept the way a refused principal is; the users so kept are the pass's kept_loaded. - In such a pass a list that still takes a permission from, or leaves out, a loaded user is held (user-list-held), naming each user and how many permissions it loses. - A held module keeps its ledger account, ledger.<node>.<module>, with its other users: heldModuleUsers matched <node>.<module>[.<process>] only, which dropped the ledger user. Claude-Session: https://claude.ai/code/session_01NcbgfFfQ4Z9UE5jK32PmE5	2026-11-07 23:28:17 +01:00