jschoubben 276886d8f6 G-delivery 5 (grants half): a read-only state is written by the process naming it alone ...

The bus module's spend record must not be writable by the tool runner. A state declared read-only gets read on
the module's own account and the tool runner carrying it (direct get, a watch's consumer) and no publish on its
$KV subjects; the process whose bus state names it writes it. The judge rule and the manifest field follow
with mesh-sdk's read-only.

Claude-Session: https://claude.ai/code/session_01JG73KJNrH5EgFXMKKYSrig

2026-11-04 18:13:41 +01:00

..

testdata

Join item 1: the rewrite map, asks/asker, the vault's types and compose-candidate to mesh-contracts

2026-11-04 15:05:12 +01:00

accounts.go

The wanted accounts include the ledger kind, held in the tool runner's ledgers, in step with mesh-sdk's buscompose (issue 1966 D5b)

2026-11-03 13:39:21 +01:00

agreement.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

announced.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

buildbacklog.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

buscompose_test.go

G-delivery 5 (grants half): a read-only state is written by the process naming it alone

2026-11-04 18:13:41 +01:00

busstate.go

mesh-grants: the bus module's process consumer hears the seat events said to it by name

2026-11-04 17:11:53 +01:00

callers.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

cancelled.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

composed.go

ENG-11 grants: a node's engine hears the status view's settled, on which it retries a failed pull from a store's holder (design 51)

2026-11-04 12:34:50 +01:00

create_test.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

create.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

creates_streams_test.go

The grants part knows the tool runner by what its manifest says, never by its name, and keeps a node's tool runner user as the list in force holds it while no manifest there says it yet, said in the held condition (ADR 0601 §4; the prepare's seams finding on mesh-grants's own name)

2026-11-03 16:44:47 +01:00

declaration_files.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

derived.go

DLV-G2: the bus module's process serves nothing, as every process account (ADR 0436 §3): it hears its module's consumes on a consumer of its own, says its stream's events and raises its conditions; the seat's reading verbs stay its module's tools'

2026-11-04 12:34:50 +01:00

doc.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

engine.go

Join item 1: the rewrite map, asks/asker, the vault's types and compose-candidate to mesh-contracts

2026-11-04 15:05:12 +01:00

fixtures_test.go

mesh-grants: a node seat's event that names its holder's machine is heard from every machine, by the one rule its holder is granted it by (ADR 0618 §4, issue 774)

2026-11-04 12:05:58 +01:00

health_grants.go

mesh-grants: the forge's ended take-in consumer is a removable leftover; the retired build-agent seat's subject is no writer (issue 1126)

2026-11-04 10:57:33 +01:00

ledger.go

The ledger account's subjects come from mesh-sdk's one naming of them (issue 1966 D5)

2026-11-03 15:13:38 +01:00

log.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

membership.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

modstreams.go

mesh-grants: create a module's object buckets and history streams, grant their readers read-only, and warn at 75 percent

2026-11-02 18:56:19 +01:00

nats.go

G-delivery 5 (grants half): a read-only state is written by the process naming it alone

2026-11-04 18:13:41 +01:00

objects.go

DLV-G3: the grants part raises no history-full; fill is the bus module's, and the old key is cleared once at start (ADR 0595 §6, design 25 § 12.3)

2026-11-04 12:34:50 +01:00

onnats.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

process_grants.go

DLV-G1, DLV-W1: the grants part and the watchman hear mesh-broker's events on the seat's subject; the keeper is granted them

2026-11-04 13:05:27 +01:00

provisioner.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

readiness.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

sdk_membership.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

seattraffic.go

mesh-grants: a node seat's event that names its holder's machine is heard from every machine, by the one rule its holder is granted it by (ADR 0618 §4, issue 774)

2026-11-04 12:05:58 +01:00

state.go

G-delivery 5 (grants half): a read-only state is written by the process naming it alone

2026-11-04 18:13:41 +01:00

streams.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

userlist_switch.go

mesh-grants: every node's engine writes its own compositions and the named readers read them all

2026-11-02 18:56:19 +01:00

users.go

G-delivery 5 (grants half): a read-only state is written by the process naming it alone

2026-11-04 18:13:41 +01:00

waits.go

The grants part knows the tool runner by what its manifest says, never by its name, and keeps a node's tool runner user as the list in force holds it while no manifest there says it yet, said in the held condition (ADR 0601 §4; the prepare's seams finding on mesh-grants's own name)

2026-11-03 16:44:47 +01:00

writers.go

DLV-G2: the bus module's process gets its own account: it defines every module's bus state by its names and an orphan's it created, serves mesh-broker's eight verbs, and no other account holds the acting four (ADR 0595 §4, §5)

2026-11-04 12:34:50 +01:00