Issue 1126, ADR 0569 §1. Group fix/1126-held-as-runs with mesh-sdk: pins mesh-sdk c2999a4 exactly (go.mod/go.sum only). The node agent's seed answer and live apply take the new held-as-runs composition: a held module's credential files stay on disk as they are (selfcompose keeps what was handed of a held module), and its consumers compose against what runs of it.
Tests: gofmt, go vet (+integration), go test pass.
Issue 1126, ADR 0569 §1. Group fix/1126-held-as-runs with mesh-sdk: pins mesh-sdk c2999a4 exactly (go.mod/go.sum only). The node agent's seed answer and live apply take the new held-as-runs composition: a held module's credential files stay on disk as they are (selfcompose keeps what was handed of a held module), and its consumers compose against what runs of it.
Tests: gofmt, go vet (+integration), go test pass.
Reviewed-by: rev-held@shanks at a6c70803ab72acb6a17024cfa17d692d0aaf15ff
novox's seed p-20261028t231141-ec84b4 refused 11 modules behind de-spiegel's hold and gitea's handed credential. The
node composes and answers through mesh-sdk's frombus, so the fix is the pin.
- The quick fix: follow one more set of words in the answer. It moves the error again.
- The thorough fix, chosen (mesh-sdk fix/1126-held-as-runs): a held module composes only as what runs of it; a consumer
or collector composes against that and is never held for the held one's stub, and a stub's handed credentials and own
secrets are left out as they run rather than refused.
Deliverynovox/mesh-host@a6c70803ab72 — merged since 2026-10-29T00:07:08Z
Source — source.main moved to novox/mesh-host@fb8ea0e683. Whether it reached the machines is mesh-delivery-view's, derived from source.main, the wants and the haves.
composed together: pass — the checker's verdict at the members' heads (2a001396cf18)
Transitions
2026-10-28 23:59 (new) → proposed (announced): novox/mesh-host#171's head announced
2026-10-28 23:59 proposed → ready (accepted): a verdict names this commit and the trunk's head as its trunk commit, the gate passed or warned, and the repository's own check did not fail; or the check gates no merge (check-gates-merge false)
2026-10-29 00:07 ready → merged (merged): on the trunk its modules follow: merged there
The commit's note under refs/notes/mesh-plan keeps every transition of this change up to its merge: git log --notes=mesh-plan.
<!-- mesh-delivery:view -->
**Delivery** `novox/mesh-host@a6c70803ab72` — **merged** since 2026-10-29T00:07:08Z
**Source** — source.main moved to novox/mesh-host@fb8ea0e6838c. Whether it reached the machines is `mesh-delivery-view`'s, derived from `source.main`, the wants and the haves.
**Group** `fix/1126-held-as-runs`: novox/mesh-host@a6c70803ab72, novox/mesh-sdk@c2999a4e13cc
- composed together: pass — the checker's verdict at the members' heads (2a001396cf18)
**Transitions**
- 2026-10-28 23:59 (new) → proposed (announced): novox/mesh-host#171's head announced
- 2026-10-28 23:59 proposed → ready (accepted): a verdict names this commit and the trunk's head as its trunk commit, the gate passed or warned, and the repository's own check did not fail; or the check gates no merge (check-gates-merge false)
- 2026-10-29 00:07 ready → merged (merged): on the trunk its modules follow: merged there
The commit's note under `refs/notes/mesh-plan` keeps every transition of this change up to its merge: `git log --notes=mesh-plan`.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Issue 1126, ADR 0569 §1. Group fix/1126-held-as-runs with mesh-sdk: pins mesh-sdk c2999a4 exactly (go.mod/go.sum only). The node agent's seed answer and live apply take the new held-as-runs composition: a held module's credential files stay on disk as they are (selfcompose keeps what was handed of a held module), and its consumers compose against what runs of it.
Tests: gofmt, go vet (+integration), go test pass.
Reviewed-by: rev-held@shanks at
a6c70803abDelivery
novox/mesh-host@a6c70803ab72— merged since 2026-10-29T00:07:08ZSource — source.main moved to novox/mesh-host@fb8ea0e683. Whether it reached the machines is
mesh-delivery-view's, derived fromsource.main, the wants and the haves.Group
fix/1126-held-as-runs: novox/mesh-host@a6c70803ab, novox/mesh-sdk@c2999a4e13Transitions
The commit's note under
refs/notes/mesh-plankeeps every transition of this change up to its merge:git log --notes=mesh-plan.