Grant the genesis controller its lease and secret-replaced, not mesh.control.> (hq to-be 45 Phase 2) #36

2026-10-06T10:29:31Z

mesh-admin commented

2026-10-06 10:29:31 +00:00

Genesis lock only (examples/foundation-first-node-nats.lock), so the installer's first user list matches what the controller now composes:

add $KV.mesh-controller_lease.> (the controller's lease, mesh-controller Phase 2 PR)
add mesh.seat.mesh-controller.event.secret-replaced (missing since mesh-controller #82; controller main's genesis test fails without it)
drop mesh.control.> from the controller's publish: a machine's report has one writer, its node-engine (writers table, hq ADR 0229)

Checked by mesh-controller TestTheInstallersFirstUserListIsWhatTheControllerWouldCompose against this branch. Merge with or before the mesh-controller Phase 2 PR.

Genesis lock only (`examples/foundation-first-node-nats.lock`), so the installer's first user list matches what the controller now composes: - add `$KV.mesh-controller_lease.>` (the controller's lease, mesh-controller Phase 2 PR) - add `mesh.seat.mesh-controller.event.secret-replaced` (missing since mesh-controller #82; controller main's genesis test fails without it) - drop `mesh.control.>` from the controller's publish: a machine's report has one writer, its node-engine (writers table, hq ADR 0229) Checked by mesh-controller `TestTheInstallersFirstUserListIsWhatTheControllerWouldCompose` against this branch. **Merge with or before the mesh-controller Phase 2 PR.**

mesh-admin added 1 commit 2026-10-06 10:29:31 +00:00

Grant the genesis controller its lease and the secret-replaced event, and not what the machines say (hq to-be 45 Phase 2) bbe74f3fc2

The controller now composes a publish grant for its lease bucket
($KV.mesh-controller_lease.>), which it must write before it acts, and for
the seat event secret-replaced (hq ADR 0228, mesh-controller #82); and it no
longer publishes mesh.control.>: a machine's report has one writer, its
node-engine, and the writers table refuses a second at composition. The
installer's first user list must say what the controller derives, or a new
mesh's first controller is refused its lease and serves without one.

mesh-admin merged commit b2808549ee into main

2026-10-06 10:30:28 +00:00

mesh-admin deleted branch feat/a-core-that-cannot-fail-silently-phase-2-grants

2026-10-06 10:30:28 +00:00

mesh-admin commented

2026-10-06 23:10:52 +00:00

Delivery novox/mesh-host@b2808549ee72 — held since 2026-10-06T23:05:28Z

Held for a person: merged without a passing check: only a person decides that it goes on — mesh-delivery.release with why lets it go on.

Delivery plan — builds mesh-host → ace, g14, novox, shanks; no bus step

tier 0: mesh-host
ace: receives mesh-host
g14: receives mesh-host
novox: receives mesh-host
shanks: receives mesh-host

Transitions

2026-10-06 23:05 (new) → proposed (announced): novox/mesh-host#36 merged; its head was not heard by this owner, so it is made from the forge's word
2026-10-06 23:05 proposed → held (merged-unchecked): merged without a passing check — a verdict known with it is taken first: only a person decides that it goes on

The commit's note under refs/notes/mesh-plan keeps every transition: git log --notes=mesh-plan.

**Delivery** `novox/mesh-host@b2808549ee72` — **held** since 2026-10-06T23:05:28Z Held for a person: merged without a passing check: only a person decides that it goes on — `mesh-delivery.release` with why lets it go on. **Delivery plan** — builds mesh-host → ace, g14, novox, shanks; no bus step - tier 0: mesh-host - ace: receives mesh-host - g14: receives mesh-host - novox: receives mesh-host - shanks: receives mesh-host **Transitions** - 2026-10-06 23:05 (new) → proposed (announced): novox/mesh-host#36 merged; its head was not heard by this owner, so it is made from the forge's word - 2026-10-06 23:05 proposed → held (merged-unchecked): merged without a passing check — a verdict known with it is taken first: only a person decides that it goes on The commit's note under `refs/notes/mesh-plan` keeps every transition: `git log --notes=mesh-plan`.

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: novox/mesh-host#36