L3: the node trusts the vault's key, serves the node seat node-engine and keeps its acts on the bus (issue 774, ADR 0561), rebased onto L2 #168

Merged

mesh-tools merged 14 commits from feat/774-vault-mints-l2 into main 2026-10-29 07:44:19 +00:00

Conversation 7 Commits 14 Files Changed 27

+2689 -59

mesh-tools commented 2026-10-28 20:56:50 +00:00

Member

Copy Link

Copy Source

L3 (issue 774, ADR 0561), rebased onto L2.

Group member with mesh-delivery, mesh-catalog and hq on feat/774-vault-mints-l2. Pins mesh-sdk c2999a4 exactly (mesh-sdk #128's head, merged; it holds L3's sdk 8eafc0c and the seed fixes 77b48a4, 76f7c4d and c2999a4).

Under L2: the composer hooks carry L2's seals beside L3's certify; the kept declaration's retirement reads the seat mesh-placement's placement.

Merged main (#169, #170) in at 1f3fb52 and moved the pin to 76f7c4d at 9bd1c84 (a pull request head; the check refuses a merge commit). Merged main (#171) in at 4f9227a: pin c2999a4; gofmt, vet (+integration tag) and unit tests pass.

Tests: 1262 unit, 6 integration (approved head: 1262, 6).

Reviewed-by: rev-l2@shanks at 4f9227a186

L3 (issue 774, ADR 0561), rebased onto L2. Group member with mesh-delivery, mesh-catalog and hq on feat/774-vault-mints-l2. Pins mesh-sdk c2999a4 exactly (mesh-sdk #128's head, merged; it holds L3's sdk 8eafc0c and the seed fixes 77b48a4, 76f7c4d and c2999a4). Under L2: the composer hooks carry L2's seals beside L3's certify; the kept declaration's retirement reads the seat mesh-placement's placement. Merged main (#169, #170) in at 1f3fb52 and moved the pin to 76f7c4d at 9bd1c84 (a pull request head; the check refuses a merge commit). Merged main (#171) in at 4f9227a: pin c2999a4; gofmt, vet (+integration tag) and unit tests pass. Tests: 1262 unit, 6 integration (approved head: 1262, 6). Reviewed-by: rev-l2@shanks at 4f9227a1860f2e9e90c332fef4bc71ce166aa209

mesh-tools added 11 commits 2026-10-28 20:56:50 +00:00

The node trusts the vault's key beside the controller's until the lease is handed away, says what it trusts in its record, asks the vault for its own certificate, composes the vault's authority beside the controller's, and reads the kept declaration no more once every placed module has a have (issue 774, ADR 0550 §2) 479ac71050

The node seat node-engine served on the engine's link: its verbs with their proven caller, its acts kept in its own state, a hand-over or access act asked of the operator as node-engine-<node> and performed only on the warrant (issue 774, ADR 0563 §1-§3) aaffc19232

The engine judges its node seat's hand-over and take as it judges the controller's ask, answers root-free for its own machine, and asks a library's take itself once (issue 774, ADR 0563 §3, §4, §6) 05ff90e3c1

The node seat's acts and the engine's own asks are the node-engine's declared state acts on the bus: one key each under its own node's keys, written by compare-and-set, one ask open per path made by a create; acts reads one by its id (issue 774, ADR 0563 §2, §3) 81fa009bf4

Every signed ask is verified with the controller's key the engine trusts at that ask, so after the lease write none signed by it is taken (issue 774, ADR 0563 §7, ADR 0550 §2; rev-l3 round 1) 95dd64c774

From the lease write a directory used as found names the node seat's hand-over as its way out, following the lease the engine hears (issue 774, ADR 0563 §5; rev-l3 round 1) a5d1f7dde4

The last setuid search's start and each library's own take ask are keys of their own, which no number of other acts moves (issue 774, ADR 0563 §2, §4; rev-l3 round 1) 2a0c428ef9

Judgements and refused setuid searches, which any caller may ask, roll in one bounded key of the node's and add no key to the bucket every node shares; a key per act is kept for hand-overs, access acts and searches started (issue 774, ADR 0563 §2; rev-l3 round 2) 6cbdb3712e

Pin mesh-sdk 4e6e5cc, the L3 group's head rebased on L2 (issue 774) 1900b40192

Name the seat mesh-placement where the kept declaration's retirement reads the placement, as L2 moved it (issue 774, ADR 0567) 9120f94aa4

Pin mesh-sdk 8eafc0c, the L3 group's head on mesh-sdk main with #120 and #121 (issue 774) e0c7f36ca9

mesh-tools commented 2026-10-28 20:56:57 +00:00

Author

Member

Copy Link

Copy Source

Delivery novox/mesh-host@4f9227a1860f — merged since 2026-10-29T07:44:21Z

Source — source.main moved to novox/mesh-host@0a4c35f731. Whether it reached the machines is mesh-delivery-view's, derived from source.main, the wants and the haves.

Group feat/774-vault-mints-l2: novox/hq@7fd89de7cb, novox/mesh-catalog@add6f143ca, novox/mesh-delivery@17c79f25f0, novox/mesh-host@4f9227a186

• composed together: pass — the checker's verdict at the members' heads (21d54fbf45b0)

Transitions

• 2026-10-29 00:08 (new) → proposed (announced): novox/mesh-host#168's head announced
• 2026-10-29 00:08 proposed → ready (accepted): a verdict names this commit and the trunk's head as its trunk commit, the gate passed or warned, and the repository's own check did not fail; or the check gates no merge (check-gates-merge false)
• 2026-10-29 07:44 ready → merged (merged): on the trunk its modules follow: merged there

The commit's note under refs/notes/mesh-plan keeps every transition of this change up to its merge: git log --notes=mesh-plan.

<!-- mesh-delivery:view --> **Delivery** `novox/mesh-host@4f9227a1860f` — **merged** since 2026-10-29T07:44:21Z **Source** — source.main moved to novox/mesh-host@0a4c35f731a7. Whether it reached the machines is `mesh-delivery-view`'s, derived from `source.main`, the wants and the haves. **Group** `feat/774-vault-mints-l2`: novox/hq@7fd89de7cb81, novox/mesh-catalog@add6f143ca23, novox/mesh-delivery@17c79f25f047, novox/mesh-host@4f9227a1860f - composed together: pass — the checker's verdict at the members' heads (21d54fbf45b0) **Transitions** - 2026-10-29 00:08 (new) → proposed (announced): novox/mesh-host#168's head announced - 2026-10-29 00:08 proposed → ready (accepted): a verdict names this commit and the trunk's head as its trunk commit, the gate passed or warned, and the repository's own check did not fail; or the check gates no merge (check-gates-merge false) - 2026-10-29 07:44 ready → merged (merged): on the trunk its modules follow: merged there The commit's note under `refs/notes/mesh-plan` keeps every transition of this change up to its merge: `git log --notes=mesh-plan`.

mesh-tools commented 2026-10-28 22:21:34 +00:00

Author

Member

Copy Link

Copy Source

mesh-delivery: the operator's Approve of this pull request's merge into main is ended: a head it covers moved on: the heads it covers are no longer the group's heads. Nothing is merged on it. The operator is asked again once the checks pass at the new head.

mesh-delivery: the operator's Approve of this pull request's merge into main is ended: a head it covers moved on: the heads it covers are no longer the group's heads. Nothing is merged on it. The operator is asked again once the checks pass at the new head.

mesh-tools commented 2026-10-28 22:50:53 +00:00

Author

Member

Copy Link

Copy Source

mesh-delivery: the operator's Approve of this pull request's merge into main is ended: a head it covers moved on: the heads it covers are no longer the group's heads. Nothing is merged on it. The operator is asked again once the checks pass at the new head.

mesh-delivery: the operator's Approve of this pull request's merge into main is ended: a head it covers moved on: the heads it covers are no longer the group's heads. Nothing is merged on it. The operator is asked again once the checks pass at the new head.

jschoubben added 1 commit 2026-10-28 23:11:13 +00:00

Merge main into L3: pin mesh-sdk main d4c61ee, which holds L3's sdk and the seed's held-as-today fixes (issue 774) 1f3fb52470

jschoubben added 1 commit 2026-10-28 23:20:03 +00:00

Pin mesh-sdk 76f7c4d, the seed fix's own head: the checker refuses a pin to main's merge commit d4c61ee (same tree) as on no pull request (issue 774) 9bd1c84e0f

mesh-tools commented 2026-10-28 23:20:11 +00:00

Author

Member

Copy Link

Copy Source

mesh-delivery: the operator's Approve of this pull request's merge into main is ended: a head it covers moved on: the heads it covers are no longer the group's heads. Nothing is merged on it. The operator is asked again once the checks pass at the new head.

mesh-delivery: the operator's Approve of this pull request's merge into main is ended: a head it covers moved on: the heads it covers are no longer the group's heads. Nothing is merged on it. The operator is asked again once the checks pass at the new head.

mesh-tools commented 2026-10-28 23:37:45 +00:00

Author

Member

Copy Link

Copy Source

mesh-delivery: not merged. The merge of this pull request into main at 9bd1c84e0f was declined: the operator, via telegram (user id verified), chose Decline. A new head asks the operator again.

mesh-delivery: **not merged.** The merge of this pull request into main at 9bd1c84e0f4c3d5445ae2e324e874decfe5a171a was declined: the operator, via telegram (user id verified), chose Decline. A new head asks the operator again.

jschoubben added 1 commit 2026-10-29 00:08:28 +00:00

Merge main (#171) into L3: pin mesh-sdk c2999a4, mesh-sdk #128's head, which holds L3's sdk and both seed fixes (issue 774) 4f9227a186

mesh-tools commented 2026-10-29 00:57:15 +00:00

Author

Member

Copy Link

Copy Source

mesh-delivery: the operator's Approve of this pull request's merge into main is ended: a head it covers moved on: the heads it covers are no longer the group's heads. Nothing is merged on it. The operator is asked again once the checks pass at the new head.

mesh-delivery: the operator's Approve of this pull request's merge into main is ended: a head it covers moved on: the heads it covers are no longer the group's heads. Nothing is merged on it. The operator is asked again once the checks pass at the new head.

mesh-tools commented 2026-10-29 01:17:49 +00:00

Author

Member

Copy Link

Copy Source

mesh-delivery: the operator's Approve of this pull request's merge into main is ended: a head it covers moved on: the heads it covers are no longer the group's heads. Nothing is merged on it. The operator is asked again once the checks pass at the new head.

mesh-delivery: the operator's Approve of this pull request's merge into main is ended: a head it covers moved on: the heads it covers are no longer the group's heads. Nothing is merged on it. The operator is asked again once the checks pass at the new head.

mesh-tools merged commit 0a4c35f731 into main 2026-10-29 07:44:19 +00:00

mesh-tools deleted branch feat/774-vault-mints-l2 2026-10-29 07:44:21 +00:00

mesh-tools referenced this pull request 2026-10-29 07:48:05 +00:00

Judge a module the node agent has not taken yet by the composition its have names, and knock the filling whenever what runs changes (issue 924; pins mesh-sdk for issue 1126) #172

mesh-tools referenced this pull request 2026-10-29 07:48:53 +00:00

Judge a module the node agent has not taken yet by the composition its have names, and knock the filling whenever what runs changes (issue 924; pins mesh-sdk for issue 1126) #173

mesh-tools referenced this pull request 2026-10-29 08:43:30 +00:00

Revert L3: its node-engine removed every held module on novox, the bus server among them (issue 774) #174

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

mesh/ready

Reviewed and ready: mesh-delivery merges at the marked head once its checks pass (hq ADR 0364)

No labels

Milestone

No items

No Milestone

Assignees

Clear assignees

agent-ace agent-g14 agent-novox agent-shanks jschoubben mesh-tools miel.truyen nox-agent

No Assignees

2 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: novox/mesh-host#168