mesh-grants: the shadow user list takes each user's hash from the vault and says per user whether one is held (issue 1945, ADR 0547 clause 9) #57

Merged

mesh-tools merged 1 commits from fix/1945-vault-hashing into main

2026-10-26 07:48:08 +00:00

Author	SHA1	Message	Date
jschoubben	9132b6a296	mesh-grants: take each user's hash from the vault's bus-accounts and say per user whether one is held, so take-over waits until every user has a credential mesh/delivery merged: source.main moved to novox/mesh-delivery@13380e3d0e52 Details mesh/check pass 9132b6a296b9 on 13380e3d0e52 \| unit 168 run, 473 kept \| integration 178 run, 539 kept \| composition passed in 36ms on novox ADR 0547 clause 9: the vault writes the hash of each bus account it holds into bus-accounts.<user>. The grants part watches that state (no timer), carries the hash with each shadow user in memory only, and its user-list tool says per user whether a hash is held and how its line would differ from the loaded one (same, adds, left out for want of a credential, loses its login); never the hash, since bcrypt salts make two hashes incomparable. Take-over names the users with no hash. Issue: 1945	2026-10-26 02:29:54 +01:00

Author

SHA1

Message

Date

jschoubben

9132b6a296

mesh-grants: take each user's hash from the vault's bus-accounts and say per user whether one is held, so take-over waits until every user has a credential

mesh/delivery merged: source.main moved to novox/mesh-delivery@13380e3d0e52

Details

mesh/check pass 9132b6a296b9 on 13380e3d0e52 | unit 168 run, 473 kept | integration 178 run, 539 kept | composition passed in 36ms on novox

ADR 0547 clause 9: the vault writes the hash of each bus account it holds into bus-accounts.<user>. The grants part
watches that state (no timer), carries the hash with each shadow user in memory only, and its user-list tool says per
user whether a hash is held and how its line would differ from the loaded one (same, adds, left out for want of a
credential, loses its login); never the hash, since bcrypt salts make two hashes incomparable. Take-over names the
users with no hash.

Issue: 1945

2026-10-26 02:29:54 +01:00