jschoubben 8f6562368c DLV-G2: the bus module's process gets its own account: it defines every module's bus state by its names and an orphan's it created, serves mesh-broker's eight verbs, and no other account holds the acting four (ADR 0595 §4, §5) ...

The grants are composed for the process of the module holding mesh-broker, from every
manifest's bus-state entries and the streams of the bindings kept; the writers table names
it beside the grants part as a definer of streams; the acting verbs are denied to every
principal whose grant reaches them, and neither the holder's own account nor the tool runner
serves the seat's verbs.

Claude-Session: https://claude.ai/code/session_01JG73KJNrH5EgFXMKKYSrig

2026-11-04 12:34:50 +01:00

..

testdata

DLV-G2: the bus module's process gets its own account: it defines every module's bus state by its names and an orphan's it created, serves mesh-broker's eight verbs, and no other account holds the acting four (ADR 0595 §4, §5)

2026-11-04 12:34:50 +01:00

accounts.go

The wanted accounts include the ledger kind, held in the tool runner's ledgers, in step with mesh-sdk's buscompose (issue 1966 D5b)

2026-11-03 13:39:21 +01:00

agreement.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

announced.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

buildbacklog.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

buscompose_test.go

DLV-G2: the bus module's process gets its own account: it defines every module's bus state by its names and an orphan's it created, serves mesh-broker's eight verbs, and no other account holds the acting four (ADR 0595 §4, §5)

2026-11-04 12:34:50 +01:00

busstate.go

DLV-G2: the bus module's process gets its own account: it defines every module's bus state by its names and an orphan's it created, serves mesh-broker's eight verbs, and no other account holds the acting four (ADR 0595 §4, §5)

2026-11-04 12:34:50 +01:00

callers.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

cancelled.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

composed.go

ENG-11 grants: a node's engine hears the status view's settled, on which it retries a failed pull from a store's holder (design 51)

2026-11-04 12:34:50 +01:00

create_test.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

create.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

creates_streams_test.go

The grants part knows the tool runner by what its manifest says, never by its name, and keeps a node's tool runner user as the list in force holds it while no manifest there says it yet, said in the held condition (ADR 0601 §4; the prepare's seams finding on mesh-grants's own name)

2026-11-03 16:44:47 +01:00

declaration_files.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

derived.go

DLV-G1: the grants part writes the bus module's binding into the module's memberships on created, rewrites it on recreated, removes it on dropped, kept in memberships (ADR 0595 §1, §7)

2026-11-04 12:34:50 +01:00

doc.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

engine.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

fixtures_test.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

health_grants.go

mesh-grants: the forge's ended take-in consumer is a removable leftover; the retired build-agent seat's subject is no writer (issue 1126)

2026-11-04 10:57:33 +01:00

ledger.go

The ledger account's subjects come from mesh-sdk's one naming of them (issue 1966 D5)

2026-11-03 15:13:38 +01:00

log.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

membership.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

modstreams.go

mesh-grants: create a module's object buckets and history streams, grant their readers read-only, and warn at 75 percent

2026-11-02 18:56:19 +01:00

nats.go

DLV-G2: the bus module's process gets its own account: it defines every module's bus state by its names and an orphan's it created, serves mesh-broker's eight verbs, and no other account holds the acting four (ADR 0595 §4, §5)

2026-11-04 12:34:50 +01:00

objects.go

DLV-G3: the grants part raises no history-full; fill is the bus module's, and the old key is cleared once at start (ADR 0595 §6, design 25 § 12.3)

2026-11-04 12:34:50 +01:00

onnats.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

process_grants.go

DLV-G2: the bus module's process gets its own account: it defines every module's bus state by its names and an orphan's it created, serves mesh-broker's eight verbs, and no other account holds the acting four (ADR 0595 §4, §5)

2026-11-04 12:34:50 +01:00

provisioner.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

readiness.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

sdk_membership.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

seattraffic.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

state.go

mesh-grants: every node's engine writes its own compositions and the named readers read them all

2026-11-02 18:56:19 +01:00

streams.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

userlist_switch.go

mesh-grants: every node's engine writes its own compositions and the named readers read them all

2026-11-02 18:56:19 +01:00

users.go

DLV-G2: the bus module's process gets its own account: it defines every module's bus state by its names and an orphan's it created, serves mesh-broker's eight verbs, and no other account holds the acting four (ADR 0595 §4, §5)

2026-11-04 12:34:50 +01:00

waits.go

The grants part knows the tool runner by what its manifest says, never by its name, and keeps a node's tool runner user as the list in force holds it while no manifest there says it yet, said in the held condition (ADR 0601 §4; the prepare's seams finding on mesh-grants's own name)

2026-11-03 16:44:47 +01:00

writers.go

DLV-G2: the bus module's process gets its own account: it defines every module's bus state by its names and an orphan's it created, serves mesh-broker's eight verbs, and no other account holds the acting four (ADR 0595 §4, §5)

2026-11-04 12:34:50 +01:00