The installer's first bus user list (examples/foundation-first-node-nats.lock) must equal what the controller composes for itself. The controller's TestTheInstallersFirstUserListIsWhatTheControllerWouldCompose holds it to that. mesh-controller #157 (the controller asks the operator and acts on warrants) adds these grants:
Without them, a mesh raised from the template would refuse the controller those subjects until its first push.
Merge order: this first. mesh-controller #157's mesh/repo-check fails on this test until this is on main. merge-check.sh passes locally, and the controller's test passes with this beside it. Do not merge without review.
The installer's first bus user list (`examples/foundation-first-node-nats.lock`) must equal what the controller composes for itself. The controller's `TestTheInstallersFirstUserListIsWhatTheControllerWouldCompose` holds it to that. mesh-controller #157 (the controller asks the operator and acts on warrants) adds these grants:
- publish: `$KV.mesh-controller_asked.>`, `mesh.seat.mesh-delivery.tool.release`, `mesh.seat.mesh-delivery.tool.stop`, `mesh.seat.node-service-manager.tool.restart.*`, `mesh.seat.mesh-controller.tool.plans`;
- subscribe: `mesh.seat.operator-channel.event.decided.mesh-controller`.
Without them, a mesh raised from the template would refuse the controller those subjects until its first push.
**Merge order:** this first. mesh-controller #157's `mesh/repo-check` fails on this test until this is on main. `merge-check.sh` passes locally, and the controller's test passes with this beside it. Do not merge without review.
2026-10-09 12:25 (new) → proposed (announced): novox/mesh-host#59's head announced
2026-10-09 12:28 proposed → checked (checked): the verdict names this commit
2026-10-09 12:28 checked → ready (accepted): the gate passed or warned, and the repository's own check did not fail
2026-10-09 14:27 ready → held (hold): something holds it for a person: its group's composed check did not pass for the heads that merged, or it merged and no walk was opened for it
2026-10-09 14:27 held → covered (covered): covered: a later merge that contains it was delivered: novox/mesh-host@4ba6d0864e (merged as d8ff1540 into main, walk plan-1791555487086673110): mesh-host
The commit's note under refs/notes/mesh-plan keeps every transition: git log --notes=mesh-plan.
<!-- mesh-delivery:view -->
**Delivery** `novox/mesh-host@73e091696831` — **covered** since 2026-10-09T14:27:59Z
**Delivery plan** — builds mesh-host → ace, g14, novox, shanks; no bus step
- tier 0: mesh-host
- ace: receives mesh-host
- g14: receives mesh-host
- novox: receives mesh-host
- shanks: receives mesh-host
**Group** `feat/the-controller-asks-the-operator`, in order: novox/mesh-controller@29d6495cab11 → novox/mesh-host@73e091696831
- novox/mesh-controller@29d6495cab11 before novox/mesh-host@73e091696831: built by, over engine before controller
**Transitions**
- 2026-10-09 12:25 (new) → proposed (announced): novox/mesh-host#59's head announced
- 2026-10-09 12:28 proposed → checked (checked): the verdict names this commit
- 2026-10-09 12:28 checked → ready (accepted): the gate passed or warned, and the repository's own check did not fail
- 2026-10-09 14:27 ready → held (hold): something holds it for a person: its group's composed check did not pass for the heads that merged, or it merged and no walk was opened for it
- 2026-10-09 14:27 held → covered (covered): covered: a later merge that contains it was delivered: novox/mesh-host@4ba6d0864e3d (merged as d8ff1540 into main, walk plan-1791555487086673110): mesh-host
The commit's note under `refs/notes/mesh-plan` keeps every transition: `git log --notes=mesh-plan`.
mesh/merge-gate: PASS — every machine composes with the change as it did without (4 of 4 compose) (modules: mesh-host)
mesh/repo-check: PASS — its merge-check.sh passed
Delivery plan — builds mesh-host → ace, g14, novox, shanks; no bus step
tier 0: mesh-host
ace: receives mesh-host
g14: receives mesh-host
novox: receives mesh-host
shanks: receives mesh-host
Run by the build seat on novox as build-1791473043821589851 (builds --log build-1791473043821589851).
--- the gate: mesh-host
mesh-host: ok
long-running resources without health: 0
1 manifest(s) checked. Judged against the seats this binary carries; a claim on one of the mesh's own seats is judged fully at registration, and a seat declared by a module not given here reads as unknown. Identities judged on a 6-character machine name, against the bounds of the providers given here
judging 0 module(s) changed against 4 machine(s), as the snapshot of 2026-10-08T15:20:36Z says they run
composing every machine as the mesh is
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
composing every machine with the change
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
merge gate: PASS — every machine composes with the change as it did without (4 of 4 compose)
judged by controller development build against the facts of 2026-10-08T15:20:36Z
machines:
- a machine (f35): composes
- holds mesh-dns-resolver (idt): composes
- holds git, holds mesh-artifact-store, holds mesh-broker, holds mesh-catalog, holds mesh-delivery, holds mesh-dns-resolver, holds mesh-store, holds mesh-vault, holds npm-package-registry, the control node, the hub (ygcyr): composes
- a machine (yvbpsm): composes
a merge would rebuild 1 module(s) in 1 tier(s): mesh-host
--- its merge-check.sh (go toolchain)
ok github.com/novox/mesh-host/cmd/mesh-bootstrap 1.019s
ok github.com/novox/mesh-host/cmd/mesh-host 7.566s
ok github.com/novox/mesh-host/examples 1.033s
ok github.com/novox/mesh-host/internal/accounts 1.105s
ok github.com/novox/mesh-host/internal/apply 31.513s
ok github.com/novox/mesh-host/internal/bootstrap 5.066s
ok github.com/novox/mesh-host/internal/bundle 1.749s
ok github.com/novox/mesh-host/internal/declaration 1.054s
ok github.com/novox/mesh-host/internal/firewall 1.813s
ok github.com/novox/mesh-host/internal/identity 2.284s
ok github.com/novox/mesh-host/internal/image 1.013s
ok github.com/novox/mesh-host/internal/inventory 1.015s
ok github.com/novox/mesh-host/internal/link 11.063s
ok github.com/novox/mesh-host/internal/liveness 2.257s
ok github.com/novox/mesh-host/internal/network 1.067s
ok github.com/novox/mesh-host/internal/outward 1.018s
ok github.com/novox/mesh-host/internal/profile 1.505s
ok github.com/novox/mesh-host/internal/reachable 1.015s
ok github.com/novox/mesh-host/internal/store 3.935s
ok github.com/novox/mesh-host/internal/system 1.016s
ok github.com/novox/mesh-host/internal/tunnel 1.020s
ok github.com/novox/mesh-host/internal/units 1.012s
ok github.com/novox/mesh-host/internal/upgrade 3.185s
ok github.com/novox/mesh-host/internal/witness 35.833s
ok github.com/novox/mesh-host/packaging 1.012s
ok github.com/novox/mesh-host/validate 1.014s
**Merge check** at `e1ef1ecc`
- `mesh/merge-gate`: **PASS** — every machine composes with the change as it did without (4 of 4 compose) (modules: mesh-host)
- `mesh/repo-check`: **PASS** — its merge-check.sh passed
**Delivery plan** — builds mesh-host → ace, g14, novox, shanks; no bus step
- tier 0: mesh-host
- ace: receives mesh-host
- g14: receives mesh-host
- novox: receives mesh-host
- shanks: receives mesh-host
Run by the build seat on novox as `build-1791473043821589851` (`builds --log build-1791473043821589851`).
```
--- the gate: mesh-host
mesh-host: ok
long-running resources without health: 0
1 manifest(s) checked. Judged against the seats this binary carries; a claim on one of the mesh's own seats is judged fully at registration, and a seat declared by a module not given here reads as unknown. Identities judged on a 6-character machine name, against the bounds of the providers given here
judging 0 module(s) changed against 4 machine(s), as the snapshot of 2026-10-08T15:20:36Z says they run
composing every machine as the mesh is
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
composing every machine with the change
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
merge gate: PASS — every machine composes with the change as it did without (4 of 4 compose)
judged by controller development build against the facts of 2026-10-08T15:20:36Z
machines:
- a machine (f35): composes
- holds mesh-dns-resolver (idt): composes
- holds git, holds mesh-artifact-store, holds mesh-broker, holds mesh-catalog, holds mesh-delivery, holds mesh-dns-resolver, holds mesh-store, holds mesh-vault, holds npm-package-registry, the control node, the hub (ygcyr): composes
- a machine (yvbpsm): composes
a merge would rebuild 1 module(s) in 1 tier(s): mesh-host
--- its merge-check.sh (go toolchain)
ok github.com/novox/mesh-host/cmd/mesh-bootstrap 1.019s
ok github.com/novox/mesh-host/cmd/mesh-host 7.566s
ok github.com/novox/mesh-host/examples 1.033s
ok github.com/novox/mesh-host/internal/accounts 1.105s
ok github.com/novox/mesh-host/internal/apply 31.513s
ok github.com/novox/mesh-host/internal/bootstrap 5.066s
ok github.com/novox/mesh-host/internal/bundle 1.749s
ok github.com/novox/mesh-host/internal/declaration 1.054s
ok github.com/novox/mesh-host/internal/firewall 1.813s
ok github.com/novox/mesh-host/internal/identity 2.284s
ok github.com/novox/mesh-host/internal/image 1.013s
ok github.com/novox/mesh-host/internal/inventory 1.015s
ok github.com/novox/mesh-host/internal/link 11.063s
ok github.com/novox/mesh-host/internal/liveness 2.257s
ok github.com/novox/mesh-host/internal/network 1.067s
ok github.com/novox/mesh-host/internal/outward 1.018s
ok github.com/novox/mesh-host/internal/profile 1.505s
ok github.com/novox/mesh-host/internal/reachable 1.015s
ok github.com/novox/mesh-host/internal/store 3.935s
ok github.com/novox/mesh-host/internal/system 1.016s
ok github.com/novox/mesh-host/internal/tunnel 1.020s
ok github.com/novox/mesh-host/internal/units 1.012s
ok github.com/novox/mesh-host/internal/upgrade 3.185s
ok github.com/novox/mesh-host/internal/witness 35.833s
ok github.com/novox/mesh-host/packaging 1.012s
ok github.com/novox/mesh-host/validate 1.014s
```
mesh/merge-gate: PASS — every machine composes with the change as it did without (4 of 4 compose) (modules: mesh-host)
mesh/repo-check: PASS — its merge-check.sh passed
Delivery plan — builds mesh-host → ace, g14, novox, shanks; no bus step
tier 0: mesh-host
ace: receives mesh-host
g14: receives mesh-host
novox: receives mesh-host
shanks: receives mesh-host
Run by the build seat on shanks as build-1791536986582754317 (builds --log build-1791536986582754317).
--- the gate: mesh-host
mesh-host: ok
long-running resources without health: 0
files asking for a setting without saying whether it is trusted: 0
1 manifest(s) checked. Judged against the seats this binary carries; a claim on one of the mesh's own seats is judged fully at registration, and a seat declared by a module not given here reads as unknown. Identities judged on a 6-character machine name, against the bounds of the providers given here
judging 0 module(s) changed against 4 machine(s), as the snapshot of 2026-10-09T08:07:39Z says they run
composing every machine as the mesh is
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
composing every machine with the change
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
merge gate: PASS — every machine composes with the change as it did without (4 of 4 compose)
judged by controller development build against the facts of 2026-10-09T08:07:39Z
machines:
- a machine (f35): composes
- holds mesh-dns-resolver (idt): composes
- holds git, holds mesh-artifact-store, holds mesh-broker, holds mesh-catalog, holds mesh-delivery, holds mesh-dns-resolver, holds mesh-store, holds mesh-vault, holds npm-package-registry, the control node, the hub (ygcyr): composes
- a machine (yvbpsm): composes
a merge would rebuild 1 module(s) in 1 tier(s): mesh-host
--- its merge-check.sh (go toolchain)
ok github.com/novox/mesh-host/cmd/mesh-bootstrap 1.019s
ok github.com/novox/mesh-host/cmd/mesh-host 6.246s
ok github.com/novox/mesh-host/examples 1.021s
ok github.com/novox/mesh-host/internal/accounts 1.018s
ok github.com/novox/mesh-host/internal/apply 7.559s
ok github.com/novox/mesh-host/internal/bootstrap 2.427s
ok github.com/novox/mesh-host/internal/bundle 1.014s
ok github.com/novox/mesh-host/internal/declaration 1.070s
ok github.com/novox/mesh-host/internal/firewall 1.848s
ok github.com/novox/mesh-host/internal/identity 1.324s
ok github.com/novox/mesh-host/internal/image 1.046s
ok github.com/novox/mesh-host/internal/inventory 1.044s
ok github.com/novox/mesh-host/internal/link 10.355s
ok github.com/novox/mesh-host/internal/liveness 2.140s
ok github.com/novox/mesh-host/internal/network 1.067s
ok github.com/novox/mesh-host/internal/outward 1.050s
ok github.com/novox/mesh-host/internal/profile 1.534s
ok github.com/novox/mesh-host/internal/reachable 1.038s
ok github.com/novox/mesh-host/internal/store 1.795s
ok github.com/novox/mesh-host/internal/system 1.044s
ok github.com/novox/mesh-host/internal/tunnel 1.044s
ok github.com/novox/mesh-host/internal/units 1.036s
ok github.com/novox/mesh-host/internal/upgrade 1.466s
ok github.com/novox/mesh-host/internal/witness 7.703s
ok github.com/novox/mesh-host/packaging 1.034s
ok github.com/novox/mesh-host/validate 1.031s
**Merge check** at `e33dba74`
- `mesh/merge-gate`: **PASS** — every machine composes with the change as it did without (4 of 4 compose) (modules: mesh-host)
- `mesh/repo-check`: **PASS** — its merge-check.sh passed
**Delivery plan** — builds mesh-host → ace, g14, novox, shanks; no bus step
- tier 0: mesh-host
- ace: receives mesh-host
- g14: receives mesh-host
- novox: receives mesh-host
- shanks: receives mesh-host
Run by the build seat on shanks as `build-1791536986582754317` (`builds --log build-1791536986582754317`).
```
--- the gate: mesh-host
mesh-host: ok
long-running resources without health: 0
files asking for a setting without saying whether it is trusted: 0
1 manifest(s) checked. Judged against the seats this binary carries; a claim on one of the mesh's own seats is judged fully at registration, and a seat declared by a module not given here reads as unknown. Identities judged on a 6-character machine name, against the bounds of the providers given here
judging 0 module(s) changed against 4 machine(s), as the snapshot of 2026-10-09T08:07:39Z says they run
composing every machine as the mesh is
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
composing every machine with the change
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
merge gate: PASS — every machine composes with the change as it did without (4 of 4 compose)
judged by controller development build against the facts of 2026-10-09T08:07:39Z
machines:
- a machine (f35): composes
- holds mesh-dns-resolver (idt): composes
- holds git, holds mesh-artifact-store, holds mesh-broker, holds mesh-catalog, holds mesh-delivery, holds mesh-dns-resolver, holds mesh-store, holds mesh-vault, holds npm-package-registry, the control node, the hub (ygcyr): composes
- a machine (yvbpsm): composes
a merge would rebuild 1 module(s) in 1 tier(s): mesh-host
--- its merge-check.sh (go toolchain)
ok github.com/novox/mesh-host/cmd/mesh-bootstrap 1.019s
ok github.com/novox/mesh-host/cmd/mesh-host 6.246s
ok github.com/novox/mesh-host/examples 1.021s
ok github.com/novox/mesh-host/internal/accounts 1.018s
ok github.com/novox/mesh-host/internal/apply 7.559s
ok github.com/novox/mesh-host/internal/bootstrap 2.427s
ok github.com/novox/mesh-host/internal/bundle 1.014s
ok github.com/novox/mesh-host/internal/declaration 1.070s
ok github.com/novox/mesh-host/internal/firewall 1.848s
ok github.com/novox/mesh-host/internal/identity 1.324s
ok github.com/novox/mesh-host/internal/image 1.046s
ok github.com/novox/mesh-host/internal/inventory 1.044s
ok github.com/novox/mesh-host/internal/link 10.355s
ok github.com/novox/mesh-host/internal/liveness 2.140s
ok github.com/novox/mesh-host/internal/network 1.067s
ok github.com/novox/mesh-host/internal/outward 1.050s
ok github.com/novox/mesh-host/internal/profile 1.534s
ok github.com/novox/mesh-host/internal/reachable 1.038s
ok github.com/novox/mesh-host/internal/store 1.795s
ok github.com/novox/mesh-host/internal/system 1.044s
ok github.com/novox/mesh-host/internal/tunnel 1.044s
ok github.com/novox/mesh-host/internal/units 1.036s
ok github.com/novox/mesh-host/internal/upgrade 1.466s
ok github.com/novox/mesh-host/internal/witness 7.703s
ok github.com/novox/mesh-host/packaging 1.034s
ok github.com/novox/mesh-host/validate 1.031s
```
mesh/merge-gate pass: builds mesh-host → ace, g14, novox, shanks; no bus step; every machine composes with the change as it did without (4 of 4 compose)
mesh/delivery covered: a later merge that contains it was delivered: novox/mesh-host@4ba6d0864e3d (merged as d8ff1540 into main, walk plan-17915554870866…
mesh/merge-gate: PASS — every machine composes with the change as it did without (4 of 4 compose) (modules: mesh-host)
mesh/repo-check: PASS — its merge-check.sh passed
Delivery plan — builds mesh-host → ace, g14, novox, shanks; no bus step
tier 0: mesh-host
ace: receives mesh-host
g14: receives mesh-host
novox: receives mesh-host
shanks: receives mesh-host
Run by the build seat on ace as build-1791548757845118538 (builds --log build-1791548757845118538).
--- the gate: mesh-host
mesh-host: ok
long-running resources without health: 0
files asking for a setting without saying whether it is trusted: 0
1 manifest(s) checked. Judged against the seats this binary carries; a claim on one of the mesh's own seats is judged fully at registration, and a seat declared by a module not given here reads as unknown. Identities judged on a 6-character machine name, against the bounds of the providers given here
judging 0 module(s) changed against 4 machine(s), as the snapshot of 2026-10-09T12:24:01Z says they run
composing every machine as the mesh is
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
composing every machine with the change
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
merge gate: PASS — every machine composes with the change as it did without (4 of 4 compose)
judged by controller development build against the facts of 2026-10-09T12:24:01Z
machines:
- a machine (f35): composes
- holds mesh-dns-resolver (idt): composes
- holds git, holds mesh-artifact-store, holds mesh-broker, holds mesh-catalog, holds mesh-delivery, holds mesh-dns-resolver, holds mesh-store, holds mesh-vault, holds npm-package-registry, the control node, the hub (ygcyr): composes
- a machine (yvbpsm): composes
a merge would rebuild 1 module(s) in 1 tier(s): mesh-host
--- its merge-check.sh (go toolchain)
go: downloading git.novox.be/novox/mesh-sdk/go v0.1.9
ok github.com/novox/mesh-host/cmd/mesh-bootstrap 1.014s
ok github.com/novox/mesh-host/cmd/mesh-host 5.375s
ok github.com/novox/mesh-host/examples 1.046s
ok github.com/novox/mesh-host/internal/accounts 1.052s
ok github.com/novox/mesh-host/internal/apply 4.391s
ok github.com/novox/mesh-host/internal/bootstrap 1.511s
ok github.com/novox/mesh-host/internal/bundle 1.041s
ok github.com/novox/mesh-host/internal/declaration 1.072s
ok github.com/novox/mesh-host/internal/firewall 1.663s
ok github.com/novox/mesh-host/internal/identity 1.115s
ok github.com/novox/mesh-host/internal/image 1.040s
ok github.com/novox/mesh-host/internal/inventory 1.042s
ok github.com/novox/mesh-host/internal/link 10.333s
ok github.com/novox/mesh-host/internal/liveness 2.075s
ok github.com/novox/mesh-host/internal/meshcli 1.339s
ok github.com/novox/mesh-host/internal/network 1.055s
ok github.com/novox/mesh-host/internal/outward 1.046s
ok github.com/novox/mesh-host/internal/profile 1.514s
ok github.com/novox/mesh-host/internal/reachable 1.047s
ok github.com/novox/mesh-host/internal/store 1.214s
ok github.com/novox/mesh-host/internal/system 1.044s
ok github.com/novox/mesh-host/internal/tunnel 1.049s
ok github.com/novox/mesh-host/internal/units 1.046s
ok github.com/novox/mesh-host/internal/upgrade 1.144s
ok github.com/novox/mesh-host/internal/witness 4.270s
ok github.com/novox/mesh-host/packaging 1.011s
? github.com/novox/mesh-host/rootsearch [no test files]
ok github.com/novox/mesh-host/validate 1.011s
**Merge check** at `73e09169`
- `mesh/merge-gate`: **PASS** — every machine composes with the change as it did without (4 of 4 compose) (modules: mesh-host)
- `mesh/repo-check`: **PASS** — its merge-check.sh passed
**Delivery plan** — builds mesh-host → ace, g14, novox, shanks; no bus step
- tier 0: mesh-host
- ace: receives mesh-host
- g14: receives mesh-host
- novox: receives mesh-host
- shanks: receives mesh-host
Run by the build seat on ace as `build-1791548757845118538` (`builds --log build-1791548757845118538`).
```
--- the gate: mesh-host
mesh-host: ok
long-running resources without health: 0
files asking for a setting without saying whether it is trusted: 0
1 manifest(s) checked. Judged against the seats this binary carries; a claim on one of the mesh's own seats is judged fully at registration, and a seat declared by a module not given here reads as unknown. Identities judged on a 6-character machine name, against the bounds of the providers given here
judging 0 module(s) changed against 4 machine(s), as the snapshot of 2026-10-09T12:24:01Z says they run
composing every machine as the mesh is
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
composing every machine with the change
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
the bus's user list leaves out 5 user(s) the mesh has minted no credential for: controller, node.f35, node.idt, node.ygcyr, node.yvbpsm. Each is a user that cannot connect until one is issued
merge gate: PASS — every machine composes with the change as it did without (4 of 4 compose)
judged by controller development build against the facts of 2026-10-09T12:24:01Z
machines:
- a machine (f35): composes
- holds mesh-dns-resolver (idt): composes
- holds git, holds mesh-artifact-store, holds mesh-broker, holds mesh-catalog, holds mesh-delivery, holds mesh-dns-resolver, holds mesh-store, holds mesh-vault, holds npm-package-registry, the control node, the hub (ygcyr): composes
- a machine (yvbpsm): composes
a merge would rebuild 1 module(s) in 1 tier(s): mesh-host
--- its merge-check.sh (go toolchain)
go: downloading git.novox.be/novox/mesh-sdk/go v0.1.9
ok github.com/novox/mesh-host/cmd/mesh-bootstrap 1.014s
ok github.com/novox/mesh-host/cmd/mesh-host 5.375s
ok github.com/novox/mesh-host/examples 1.046s
ok github.com/novox/mesh-host/internal/accounts 1.052s
ok github.com/novox/mesh-host/internal/apply 4.391s
ok github.com/novox/mesh-host/internal/bootstrap 1.511s
ok github.com/novox/mesh-host/internal/bundle 1.041s
ok github.com/novox/mesh-host/internal/declaration 1.072s
ok github.com/novox/mesh-host/internal/firewall 1.663s
ok github.com/novox/mesh-host/internal/identity 1.115s
ok github.com/novox/mesh-host/internal/image 1.040s
ok github.com/novox/mesh-host/internal/inventory 1.042s
ok github.com/novox/mesh-host/internal/link 10.333s
ok github.com/novox/mesh-host/internal/liveness 2.075s
ok github.com/novox/mesh-host/internal/meshcli 1.339s
ok github.com/novox/mesh-host/internal/network 1.055s
ok github.com/novox/mesh-host/internal/outward 1.046s
ok github.com/novox/mesh-host/internal/profile 1.514s
ok github.com/novox/mesh-host/internal/reachable 1.047s
ok github.com/novox/mesh-host/internal/store 1.214s
ok github.com/novox/mesh-host/internal/system 1.044s
ok github.com/novox/mesh-host/internal/tunnel 1.049s
ok github.com/novox/mesh-host/internal/units 1.046s
ok github.com/novox/mesh-host/internal/upgrade 1.144s
ok github.com/novox/mesh-host/internal/witness 4.270s
ok github.com/novox/mesh-host/packaging 1.011s
? github.com/novox/mesh-host/rootsearch [no test files]
ok github.com/novox/mesh-host/validate 1.011s
```
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
The installer's first bus user list (
examples/foundation-first-node-nats.lock) must equal what the controller composes for itself. The controller'sTestTheInstallersFirstUserListIsWhatTheControllerWouldComposeholds it to that. mesh-controller #157 (the controller asks the operator and acts on warrants) adds these grants:$KV.mesh-controller_asked.>,mesh.seat.mesh-delivery.tool.release,mesh.seat.mesh-delivery.tool.stop,mesh.seat.node-service-manager.tool.restart.*,mesh.seat.mesh-controller.tool.plans;mesh.seat.operator-channel.event.decided.mesh-controller.Without them, a mesh raised from the template would refuse the controller those subjects until its first push.
Merge order: this first. mesh-controller #157's
mesh/repo-checkfails on this test until this is on main.merge-check.shpasses locally, and the controller's test passes with this beside it. Do not merge without review.Delivery
novox/mesh-host@73e091696831— covered since 2026-10-09T14:27:59ZDelivery plan — builds mesh-host → ace, g14, novox, shanks; no bus step
Group
feat/the-controller-asks-the-operator, in order: novox/mesh-controller@29d6495cab → novox/mesh-host@73e0916968Transitions
d8ff1540into main, walk plan-1791555487086673110): mesh-hostThe commit's note under
refs/notes/mesh-plankeeps every transition:git log --notes=mesh-plan.Merge check at
e1ef1eccmesh/merge-gate: PASS — every machine composes with the change as it did without (4 of 4 compose) (modules: mesh-host)mesh/repo-check: PASS — its merge-check.sh passedDelivery plan — builds mesh-host → ace, g14, novox, shanks; no bus step
Run by the build seat on novox as
build-1791473043821589851(builds --log build-1791473043821589851).e1ef1ecc79toe33dba74caMerge check at
e33dba74mesh/merge-gate: PASS — every machine composes with the change as it did without (4 of 4 compose) (modules: mesh-host)mesh/repo-check: PASS — its merge-check.sh passedDelivery plan — builds mesh-host → ace, g14, novox, shanks; no bus step
Run by the build seat on shanks as
build-1791536986582754317(builds --log build-1791536986582754317).e33dba74cato73e0916968Merge check at
73e09169mesh/merge-gate: PASS — every machine composes with the change as it did without (4 of 4 compose) (modules: mesh-host)mesh/repo-check: PASS — its merge-check.sh passedDelivery plan — builds mesh-host → ace, g14, novox, shanks; no bus step
Run by the build seat on ace as
build-1791548757845118538(builds --log build-1791548757845118538).