2026-10-12 - 2026-11-12
Overview
134 Pull requests merged by 2 users
Merged
#223 The seat-list finding is read from the node's own state, so a restart clears it (issue 1966)
Merged
#222 The node-engine says its events once through a transport fault, and an unsaid one at the next link (ADR 0668; issue 1966; group fix/1966-call-made-once)
Merged
#221 An unread seat list holds what is new, says so, and is read again by the operator's sessions (issue 1966; group fix/1966-seat-list-unread)
Merged
#220 The node-engine leaves an unchanged unit running across its own replacement, and says what changed when it restarts one (issue 1966)
Merged
#219 A claim problem or a refused credential holds its module, not the whole pass (issue 1966, recovery)
Merged
#218 The filter keeps the openings of a module left out of the declaration that still runs (issue 1966, recovery)
Merged
#217 Gate record of mesh-host's forge-made merges (issue 1966, recovery)
Merged
#216 The node-engine says why it composes a wanted module at no composition, and hands again one its agent lacks (issue 1966, recovery)
Merged
#215 The node-engine fetches every artifact before it replaces anything, and a failed apply no longer claims the old composition runs (issue 1966, recovery)
Merged
#214 Record forge-made merges in the delivery gate (issue 1966, recovery)
Merged
#213 The node-engine serves its seat's verbs from the bootstrapped definition until it holds the seat list (issue 1966, recovery)
Merged
#212 The node-engine passes seats with the SDK's one rule, by the build its node runs, and says the pass (ADR 0660, issue 1966, recovery)
Merged
#211 The node-engine states the seats of the list it holds, and again on every change (issue 1966, recovery)
Merged
#210 The node-engine's bus watch never holds the client back (issue 1966, bootstrap recovery)
Merged
#209 Registry milestone: mesh-host (issue 1966)
Merged
#208 Node-engine: act on a backup answer whatever runs, say why a module stays held, and show the want and the hold in the composition verb (issue 1585)
Merged
#207 Node-engine: a stop never cuts a save off, an archive's unpack is recorded at once, and an answer the want carries is acted on at start (issue 1585)
Merged
#206 Node-engine: hand a moved module by its manifest, its build and the machine, never by the vault's reading of its plan (issue 1966)
Merged
#205 Node-engine: a node names its provisioner account even when no module's files are filled this pass (issue 774)
Merged
#204 Node-engine: a held provisioner client keeps its account; a module waiting for a yes has its new build read (issues 774, 1585)
Merged
#203 L3 final: the node-engine reads core-credentials and tool-runner with no fallback, and states its manifest reads (ADR 0601 §4, ADR 0614 §4, issue 774)
Merged
#200 compose-candidate reads each manifest once and answers within its bound, from each ask's arrival
Merged
#199 compose-candidate reads the candidate by its group, as the indexer stores it
Merged
#198 sdk1: the node-engine alone composes and answers compose-candidate (ADR 0593)
Merged
#197 The node-engine without the controller's stream and lease (issue 1126 group B)
Merged
#196 The node-engine trusts the vault alone, loads the grants part's user list alone and applies only its own compositions (issue 1126)
Merged
#195 The engine dials as the login node-logins names, rotates it after a test-dial, and enrols through the enrolment seat (issue 774)
Merged
#194 The bus node writes the grants part's signed user list alone once the lease is handed (issue 774)
Merged
#193 Each node's engine writes its own declared packages and answers packages (ADR 0565 §6, issue 1953)
Merged
#192 The node-engine takes the indexer's verdict and never ends a read on a refused manifest (ADR 0578 §3)
Merged
#191 The node-engine publishes each placed module's data items, so disk-load stops recomposing the node (ADR 0577)
Merged
#190 A held module whose backup the node agent interrupted, recorded before #189, is not in the node own composition (issue 1289)
Merged
#189 A backup the node agent interrupted runs again, and a held module keeps the build it runs (issue 1289)
Merged
#188 A node reads its placement per node and module and hands a module as the vault judged (issue 774)
Merged
#187 The node composes again only when what it composes from changed (issue 774)
Merged
#186 A record a module once left in the node's composition goes with that module, so the node's own apply is no longer refused (issue 774)
Merged
#185 A node says when it composes again, says what a long pass waits on, and composes on request (issue 774)
Merged
#184 A held module keeps what it contributes, a have stuck at waiting-yes clears, and the node-engine shows a composition (issue 774)
Merged
#183 Pin mesh-sdk eff81f1, so a held module never refuses the node (issue 774)
Merged
#182 Keep the kept declaration read while a module runs at an old-form build, so novox and shanks apply their own composition again (issue 774)
Merged
#181 The node-engine composes again when a build it waits on is done (issue 774)
Merged
#180 Pin mesh-sdk 754edfa, so one refused manifest holds one module on this node (issue 774)
Merged
#179 The node-engine asks again a subscription the bus refused, so its seat answers; backups and health follow what runs (issue 774)
Merged
#178 Leave the engine's acts out of its declared state for now, so the bus's user list is composed again (issue 774)
Merged
#177 Design 47's last milestones: L3's engine re-landed with held modules never removed, provision secrets, the node's own health report (issues 774, 1126, 1954, 1952)
Merged
#176 Pin the parse-only mesh-sdk in the node-engine, so every node can compose design 47's manifests (issue 774)
Merged
#175 Pin mesh-sdk dbcaa29, so a held module's hold no longer spreads to the modules that read from it (issue 1960)
Merged
#174 Revert L3: its node-engine removed every held module on novox, the bus server among them (issue 774)
Merged
#168 L3: the node trusts the vault's key, serves the node seat node-engine and keeps its acts on the bus (issue 774, ADR 0561), rebased onto L2
Merged
#171 Pin mesh-sdk c2999a4, so a node's seed answer holds a held module as it runs and its neighbours compose (issue 1126)
Merged
#170 A node answers its seed with an old-form build, a failed or held module, and those held behind it, as they run today (issue 1126)
Merged
#169 Node agent: say what it holds today in its answer, so a seed holding the same is the same (issue 1126)
Merged
#167 Node agent: compose from the seat mesh-placement and answer proposals (issue 1126, delivery 2 of 2)
Merged
#166 Reconcile a module from the machine's facts at start and on a down edge (issue 1957, ADR 0568)
Merged
#165 The node-engine applies every module but the held ones and marks only those (group fix/1126-apply-culprit, issue 1126)
Merged
#164 The node-engine reloads the service manager when a unit file or drop-in it writes changes (group fix/shutdown-bound, issue 1126)
Merged
#163 The node's shadow says which input woke each answer (issue 1126)
Merged
#162 A one-shot at rest satisfies a stopped declaration, so the kernel's boot cleanup applies (issue 1126)
Merged
#161 Pin mesh-sdk f387581: the node composes refusals per module and folded modules' owned paths as the controller does (issue 1126, group fix/1126-seed-8)
Merged
#160 The node answers a placement candidate once, retries a read the bus did not answer, and keeps a file's secrets entry by entry (issue 1126; group fix/1126-seed-same-3)
Merged
#159 The placement test's resolved values carry their source, as mesh-config writes them (issue 1126)
Merged
#158 Node shadow: reuse a seal only at its slot, lay values as the controller does, newest candidate first, and hand the vault a drifted own secret (issue 1126, group fix/1126-seed-same)
Merged
#157 Node shadow: what runs is the composition at the have's digest, not the stale kept copy (issue 1126, group fix/1126-shadow-bodies)
Merged
#156 Node shadow: decides 'same value' by opening seals in memory, says when it is not ready or slow, carries the bus membership (issue 1126, group fix/1126-shadow-shows)
Merged
#155 Node agent: a switch never marks the new run's modules, a failed read or a bus pause keeps what runs, stale composer marks clear (issue 1126, group fix/1126-switch-safe)
Merged
#154 Node agent: a failed placement read picks no owner, a deleted placement returns the node to the controller without a restart (issue 1126, group fix/1126-shadow-all)
Merged
#153 Node agent: compose its own modules from their builds and providers' served keys under its own grant (issue 1126, group fix/1126-node-creds)
Merged
#152 The node agent folds what it runs at no new-form build into its own composition, judged from its haves, so the first composition after a restart keeps the bus (issue 1126)
Merged
#151 The node agent answers a placement candidate in shadow, applies nothing, and keeps its own sealed values in its have (issue 1126, ADR 0559 §4)
Merged
#150 A directory used as found is not a module's health, and a failed have names its cause (issue 1496, ADR 0557 §4, §5)
Merged
#149 The node composes its own modules once the catalogue places it, and writes its record (issue 1126)
Merged
#148 The node-engine runs yielding processes in one capped idle slice (issue 1806, ADR 0553/0554, change A)
Merged
#147 The node-engine moves a running daemon's build aside instead of deleting it (issue 734)
Merged
#146 The node-engine writes the followed user list into the bus module's have even when it does not apply that module (issue 1945)
Merged
#145 Bus node: follow the grants part's sealed user list after the operator's take-over, never both sources; hand the vault the loaded hashes (issue 1945)
Merged
#144 The node-engine retries an apply that met a passing bus error, so a reload does not leave a module failed (issue 1945)
Merged
#143 The bus node writes the newest signed bus user list by itself, without a want (ADR 0547 bridge, issue 1945)
Merged
#142 The node-engine wakes the provisioner when an apply lets a file it refused be written (issue 924)
Merged
#141 Say a module's health is not yet judged while it changes, and judge it as soon as its change ends (issue 1945)
Merged
#140 Drop the node's own copy of a resource a module composition declares, and give the kept declaration's filled paths to their modules (issue 1945)
Merged
#139 Apply the revision of a composition its want names, read from the key's history, when the latest has another digest (issue 1945)
Merged
#138 Never lose the bus to a replace of its own container (issue 1945)
Merged
#137 Apply again a module whose resources are gone, move a module with nothing to back up, and report ok for a running module with nothing to watch (issue 1944)
Merged
#136 Never remove a module's resources while its own composition waits to be applied (issue 1944)
Merged
#135 Refuse an apply that would write a provisioner file empty, naming the file (issue 1944)
Merged
#134 R6: the node-engine applies from its wants and signed compositions, one module at a time; operator-signers (issue 1944)
Merged
#133 R4g finish: merge-check.sh gone, reads-outside markers (issues 1295, 1935)
Merged
#132 R4g (mesh-host): merge-check.sh goes; the checker judges the repository (design 47)
Merged
#131 Take a root-made directory in the mesh's own tree, and hold a container until the file it mounts exists (issue 1873)
Merged
#130 Write the store's superuser secret where the postgres module now keeps it, and read the bus's release from its upstream image (issues 1873, 1875)
Merged
#129 Have a replacement image before removing a running container (issue 1742)
Merged
#128 Read a declared file from the node's own object bucket, declaration-files-<node> (issue 1695, ADR 0488)
Merged
#127 Pass a container's groups to the runtime as supplementary groups and report container-groups (issue 1637, ADR 0480 clause 7)
Merged
#126 Fetch a file the declaration names by digest from the bus's object bucket and verify it before writing, and run the integration tests in the merge check (issue 1695, ADR 0486 step 2)
Merged
#125 Count the home of an account a declaration makes for its own .ssh, never taking over another account's home (issue 1542)
Merged
#124 Take the node-engine's parser and validator from mesh-sdk and delete mesh-host's copies (design 47 R4b, issue 1392)
Merged
#123 The node-engine reports whether an unprivileged user can make a user namespace (design 47 R4a, issue 1308)
Merged
#121 Write a module that leaves a node as removed in its have key, so a reader can tell it stopped (issue 1369)
Merged
#122 Close the test bus only after the enrolment stand-in has removed its consumer, so the next test can subscribe (issue 604)
Merged
#120 The node-engine sends no alive message: presence replaces it (design 47 R2d, issue 1158)
Merged
#119 Judge a filled write with the roots the last apply read, asking no runtime per file (issue 1138)
Merged
#118 Write each module's have and the node's own facts beside the report (issue 1132); the check reads build-agent from the controller (issue 1142)
Merged
#117 A directory says how it reacts to files it does not know; the node-engine moves out what a move-out directory does not know (issue 1024)
Merged
#116 Feature 57 (config and provisioning): release mesh-host
Merged
#114 Feature 57 (config and provisioning): the node-engine's part, into its release branch
Merged
#113 Grant the genesis controller user operator-channel.tell (issue 835)
Merged
#112 Start no account's manager to look at its units (hq issue 764)
Merged
#111 57/P2: The node-engine writes a filled file on the provisioner client's request, and nothing else (issue 668)
Merged
#110 57/F3: Let genesis's controller write its record mirrors (issue 652)
Merged
#109 57/P1: The node-engine knows who owns a placed file at runtime (issue 667)
Merged
#98 A busy container is left running until it says idle, within 15 minutes (issue 594, hq ADR 0335)
Merged
#107 Report the networks the outward links are on, for the local network (issue 154, ADR 0340)
Merged
#108 Adopt genesis's bus through the bus's planned step, its streams snapshotted first (issue 590, hq ADR 0333 §3)
Merged
#106 Build the Go toolchain at genesis's base step, beside the base (issue 616)
Merged
#105 Wait until the node applied the genesis document before the sdk step asks for a build (issue 615)
Merged
#104 Raise genesis's store as the postgres module's server, so the store step adopts it as it runs (issue 609, hq ADR 0338)
Merged
#103 Place the bus's users after every push until the bus is adopted (issue 608)
Merged
#102 genesis: seal the build agent the forge it raised, in place of the builder's npm-password (hq issue 121, ADR 0336)
Merged
#101 Install the build agent at genesis, the module that builds since ADR 0190 (issue 596)
Merged
#100 Leave a file the controller's manifest writes itself out of genesis's secrets (issue 597)
Merged
#99 Raise genesis's bus where the nats module keeps it, so adopting it keeps it (issue 590, hq ADR 0333)
Merged
#97 The tool runner joins the own groups of the modules whose tools it runs, and own directories may keep their group (hq ADR 0334, issue 567)
Merged
#96 Raise genesis on the bus the mesh runs on, from one bundle (issue 146, ADR 0331)
Merged
#92 A machine says what it is made of, and says it once a day unasked (issue 160)
Merged
#95 Keep libraries under a group of their own, and give each joining module a user in it (hq ADR 0328, issue 567)
Merged
#94 Give the controller the contract it can fill: tool runners by name, the take act's access id, wait reasons and ACL support (hq ADR 0325)
Merged
#93 Give every module an identity and keep shared folders through ACL entries (hq ADR 0325, issue 567)
Merged
#91 Genesis trusts its registry before it pushes to it (issue 92)
Merged
#90 A package manager that does not answer fails only the packages; the rest of the declaration applies (issue 233)
Merged
#87 Give a mesh directory its mode and owner only through a descriptor (issue 358)
Merged
#88 Judge a node's directories read-only before the walk refuses any (issue 358)
Merged
#86 A read-write access grants the path's own group, and the path is never changed (hq ADR 0312, issue 537)
Merged
#85 Carry the controller's grant to ask the delivery's owner for its groups in the installer's first user list (hq ADR 0306, issue 525)
Merged
#84 Say an unhealthy resource's restart count as what it counts (issue 458)