Grant the genesis controller the self-check's ban-list question (hq to-be 45 Phase 1, D8) #34

Merged
mesh-admin merged 1 commits from fix/phase-1-d8-grant-and-d10-version into main 2026-10-06 08:45:16 +00:00
Contributor

Companion of mesh-controller#80: the installer's first user list grants the controller mesh.seat.node-intrusion-prevention.tool.banned.*, which it now composes for D8 (mesh-controller's genesis test holds the two equal). Only matters for a new mesh; no host code changes, nothing to roll out to machines.

Companion of mesh-controller#80: the installer's first user list grants the controller `mesh.seat.node-intrusion-prevention.tool.banned.*`, which it now composes for D8 (mesh-controller's genesis test holds the two equal). Only matters for a new mesh; no host code changes, nothing to roll out to machines.
mesh-admin added 1 commit 2026-10-06 08:45:00 +00:00
The controller now composes a publish grant for
mesh.seat.node-intrusion-prevention.tool.banned.*, which D8 asks every
machine; the installer's first user list must say what the controller
derives, or a new mesh's first self-check is refused it.
mesh-admin merged commit d7d93f57c5 into main 2026-10-06 08:45:16 +00:00
mesh-admin deleted branch fix/phase-1-d8-grant-and-d10-version 2026-10-06 08:45:16 +00:00
Author
Contributor

Delivery novox/mesh-host@d7d93f57c53d — held since 2026-10-06T23:05:28Z

Held for a person: merged without a passing check: only a person decides that it goes on — mesh-delivery.release with why lets it go on.

Delivery plan — builds mesh-host → ace, g14, novox, shanks; no bus step

  • tier 0: mesh-host
  • ace: receives mesh-host
  • g14: receives mesh-host
  • novox: receives mesh-host
  • shanks: receives mesh-host

Transitions

  • 2026-10-06 23:05 (new) → proposed (announced): novox/mesh-host#34 merged; its head was not heard by this owner, so it is made from the forge's word
  • 2026-10-06 23:05 proposed → held (merged-unchecked): merged without a passing check — a verdict known with it is taken first: only a person decides that it goes on

The commit's note under refs/notes/mesh-plan keeps every transition: git log --notes=mesh-plan.

<!-- mesh-delivery:view --> **Delivery** `novox/mesh-host@d7d93f57c53d` — **held** since 2026-10-06T23:05:28Z Held for a person: merged without a passing check: only a person decides that it goes on — `mesh-delivery.release` with why lets it go on. **Delivery plan** — builds mesh-host → ace, g14, novox, shanks; no bus step - tier 0: mesh-host - ace: receives mesh-host - g14: receives mesh-host - novox: receives mesh-host - shanks: receives mesh-host **Transitions** - 2026-10-06 23:05 (new) → proposed (announced): novox/mesh-host#34 merged; its head was not heard by this owner, so it is made from the forge's word - 2026-10-06 23:05 proposed → held (merged-unchecked): merged without a passing check — a verdict known with it is taken first: only a person decides that it goes on The commit's note under `refs/notes/mesh-plan` keeps every transition: `git log --notes=mesh-plan`.
Sign in to join this conversation.
No Reviewers
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: novox/mesh-host#34