novox/mesh-delivery

The grants part keeps and recovers every binding of state asked in requires, and the validator reads both forms (issue 1966) #190

Open

mesh-tools wants to merge 7 commits from fix/1966-requires-grants into main

Author	SHA1	Message	Date
jschoubben	ecad0c688b	A re-read of the seat events that fails partway keeps nothing it read (issue 1966) mesh/delivery ready: it is merged on the Approve Details mesh/check being carried to ecad0c688b48 on 05e21fd8a382 \| from fc21f2d1bd56 A created whose dropped lay past the failure was kept again. When the stream cannot be read whole, only the error is written to bindings-again. Claude-Session: https://claude.ai/code/session_01NcbgfFSnn24M3GcqttoU7i	2026-11-09 14:22:18 +01:00
jschoubben	aa89032f02	A tool reads one module's bindings again from the seat events the shared stream still holds (issue 1966) A binding the bus module said created that the part did not keep had no recovery: distribution's holds, windows, mirrors and events are missing on the bus node's memberships. grants_bindings_again, a hand act, asks the process to read the seat mesh-broker's created, recreated and dropped of one module again from EVENTS by sequence and keep each through HearBroker in order, so a dropped entry stays dropped. grants_bindings shows what it kept, and says when the stream no longer holds a created: then the seat's list answering bindings is the path (the record extending ADR 0595 §7). The part alone is granted the stream's message get, no consumer. Claude-Session: https://claude.ai/code/session_01NcbgfFSnn24M3GcqttoU7i	2026-11-09 14:11:26 +01:00
jschoubben	44422f21db	Prove on a server under the composed grants that a module writes its bound bucket (issue 1966) The integration case after created proved only that the binding is in the membership, never that the account can use it (design 25 § 12.7). Under the list the composer writes, the keeper creates mod-c_kept, mod-c's own account binds and writes it, and another module reads nothing of it. Claude-Session: https://claude.ai/code/session_01NcbgfFSnn24M3GcqttoU7i	2026-11-09 14:01:41 +01:00
jschoubben	67e1c7594f	A tool reads the bindings the grants part keeps, beside the memberships it wrote (issue 1966) bound.<module> had no reader: a binding lost or kept but not yet written into a membership could only be guessed from grants_membership. grants_bindings names each kept binding and, by membership, the ones it lacks. Claude-Session: https://claude.ai/code/session_01NcbgfFSnn24M3GcqttoU7i	2026-11-09 14:01:41 +01:00
jschoubben	4d75646bf4	Guard that kept and issued state is read only through mesh-sdk's two rules (issue 1966) A reader of a manifest's or a membership's State beside catalogue.KeptStates and Membership.StateIssued misses a key-value entry asked in requires, the kind of this issue's faults. The row reads the repository's syntax trees and allows only the rules that judge or compose the old section itself. Claude-Session: https://claude.ai/code/session_01NcbgfFSnn24M3GcqttoU7i	2026-11-09 14:01:41 +01:00
jschoubben	c2e7249897	Keep every binding the bus module says created, and never acknowledge one not kept distribution's membership carried 4 of its 8 bindings and mesh-knowledge's 3 of 6 (issue 1966). The grants part wrote a module's kept bindings with a blind put, so two created heard at once lost one, and acknowledged every seat event whatever its handler answered, while the log said it would come again. The bindings are now written at the revision read and read again once on a conflict, and an event not applied is left unacknowledged (a delayed nak). Claude-Session: https://claude.ai/code/session_01NcbgfFSnn24M3GcqttoU7i	2026-11-09 14:01:41 +01:00
jschoubben	35c3f5dd2f	The manifest validator reads kept state in both forms; per-machine in requires is refused A process's bus.state, a seat contribution and a seat's records naming a key-value entry asked in requires were refused, where the old state section is accepted (issue 1966, ADR 0595 §11). They now read catalogue.KeptStates. A per-machine key-value entry in requires is refused with its reason: its binding names no machine's key, so no machine could be held to its own. Claude-Session: https://claude.ai/code/session_01NcbgfFSnn24M3GcqttoU7i	2026-11-09 14:01:41 +01:00