jschoubben a78c5700fd Grant a module's bus state asked in requires to the accounts that run its code ...

The grants part wrote a binding into a membership on the bus module's
created, but granted its subjects to no account but the ledger's, so
distribution's program and the tool runner carrying it were refused their
own key-value, object store and stream entries (issue 1966, ADR 0595 §1,
design 25 § 12.2). The kept bindings now reach Declared in the same pass that
writes them into the membership, and one function, boundOf, grants each to
the module's own account and the tool runner, as its old section is granted;
a process's bus.state names a key-value entry as an old state. The composed
membership carries the bindings, so grants_membership's two sides agree.

Claude-Session: https://claude.ai/code/session_01NcbgfFSnn24M3GcqttoU7i

2026-11-09 13:34:26 +01:00

..

testdata

Grants: the node-engine's records keep its consumes, so each node account hears the backup holder's word and settled

2026-11-05 23:50:05 +01:00

accounts.go

The assigner's state and verb placement are assignments, with its events, tools, views and every caller; the assigner copies the retired state at its start (issue 1966)

2026-11-05 22:13:20 +01:00

agreement.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

announced.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

buildbacklog.go

mesh-grants: no go/delivery, health or provisions import left: the user list and grants are its own grantsstate, the other parts' states are named in its buscompose names.go (checked against its manifest), their values are the seats' types (ADR 0634 §1, §4; issue 1966)

2026-11-05 16:54:28 +01:00

buscompose_test.go

Grants creates a one-filter consumer on the plain create subject it is granted

2026-11-08 23:56:58 +01:00

busstate.go

Grant a module's bus state asked in requires to the accounts that run its code

2026-11-09 13:34:26 +01:00

callers.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

cancelled.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

composed.go

The node-engine's account hears what its manifest consumes: the view's settled is a consumes line, not a special case in the grants part (ADR 0625 section 4, issue 1966)

2026-11-05 19:23:39 +01:00

create_test.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

create.go

Grants creates a one-filter consumer on the plain create subject it is granted

2026-11-08 23:56:58 +01:00

creates_streams_test.go

Merge origin/main into the registry branch: trunk's own build at start, empty open-tries answer, grants filters and heard consumers beside the Placement retirement

2026-11-05 23:35:01 +01:00

declaration_files.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

derived.go

Merge origin/main into the registry branch: trunk's own build at start, empty open-tries answer, grants filters and heard consumers beside the Placement retirement

2026-11-05 23:35:01 +01:00

doc.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

engine.go

No client names the holder of the seat mesh-provisioner: each reader keeps its own constant, held to its manifest (ADR 0625 section 4, issue 1966)

2026-11-05 19:36:21 +01:00

fixtures_test.go

Grants: the node-engine's records keep its consumes, so each node account hears the backup holder's word and settled

2026-11-05 23:50:05 +01:00

health_grants.go

The grants part publishes busgrants (the removals' grants, the ended controller's leftovers, what the watchman hears); the watchman takes them and the self-check's checked from the seat, provisions from meshprovisionerclient (ADR 0634 §4, ADR 0635 §4; issue 1966)

2026-11-05 17:00:01 +01:00

ledger.go

The ledger account's subjects come from mesh-sdk's one naming of them (issue 1966 D5)

2026-11-03 15:13:38 +01:00

log.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

membership.go

Grant a module's bus state asked in requires to the accounts that run its code

2026-11-09 13:34:26 +01:00

modstreams.go

mesh-grants: create a module's object buckets and history streams, grant their readers read-only, and warn at 75 percent

2026-11-02 18:56:19 +01:00

names_test.go

The assigner's state and verb placement are assignments, with its events, tools, views and every caller; the assigner copies the retired state at its start (issue 1966)

2026-11-05 22:13:20 +01:00

names.go

The assigner's state and verb placement are assignments, with its events, tools, views and every caller; the assigner copies the retired state at its start (issue 1966)

2026-11-05 22:13:20 +01:00

nats.go

Grant a module's bus state asked in requires to the accounts that run its code

2026-11-09 13:34:26 +01:00

objects.go

Grant a module's bus state asked in requires to the accounts that run its code

2026-11-09 13:34:26 +01:00

onnats.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

process_grants.go

DLV-G1, DLV-W1: the grants part and the watchman hear mesh-broker's events on the seat's subject; the keeper is granted them

2026-11-04 13:05:27 +01:00

provisioner.go

The assigner's state and verb placement are assignments, with its events, tools, views and every caller; the assigner copies the retired state at its start (issue 1966)

2026-11-05 22:13:20 +01:00

readiness.go

mesh-grants: own the bus's composer, so a change to who may say what rebuilds only the grants part

2026-11-02 18:56:19 +01:00

sdk_membership.go

mesh-grants: the unused aliases of membership's CredentialIn and BareAddress go (ADR 0635 §4; issue 1966)

2026-11-05 17:00:13 +01:00

seats_main_test.go

Grants part: the claims' scopes and verbs come from the seat list catalogue holds (the host's), the seat names from the contracts, the enrolment seat is mesh-node-enroller in the part and its tests (D-30 first part, D-23; issue 1966)

2026-11-05 14:55:31 +01:00

seattraffic.go

mesh-grants: no go/delivery, health or provisions import left: the user list and grants are its own grantsstate, the other parts' states are named in its buscompose names.go (checked against its manifest), their values are the seats' types (ADR 0634 §1, §4; issue 1966)

2026-11-05 16:54:28 +01:00

state.go

The assigner's state and verb placement are assignments, with its events, tools, views and every caller; the assigner copies the retired state at its start (issue 1966)

2026-11-05 22:13:20 +01:00

streams.go

The grants part publishes busgrants (the removals' grants, the ended controller's leftovers, what the watchman hears); the watchman takes them and the self-check's checked from the seat, provisions from meshprovisionerclient (ADR 0634 §4, ADR 0635 §4; issue 1966)

2026-11-05 17:00:01 +01:00

userlist_switch.go

mesh-grants: no go/delivery, health or provisions import left: the user list and grants are its own grantsstate, the other parts' states are named in its buscompose names.go (checked against its manifest), their values are the seats' types (ADR 0634 §1, §4; issue 1966)

2026-11-05 16:54:28 +01:00

users.go

Grant a module's bus state asked in requires to the accounts that run its code

2026-11-09 13:34:26 +01:00

waits.go

The grants part knows the tool runner by what its manifest says, never by its name, and keeps a node's tool runner user as the list in force holds it while no manifest there says it yet, said in the held condition (ADR 0601 §4; the prepare's seams finding on mesh-grants's own name)

2026-11-03 16:44:47 +01:00

writers.go

Merge origin/main into the registry branch: trunk's own build at start, empty open-tries answer, grants filters and heard consumers beside the Placement retirement

2026-11-05 23:35:01 +01:00