Grant the genesis controller its lease and secret-replaced, not mesh.control.> (hq to-be 45 Phase 2) #36

Merged

mesh-admin merged 1 commits from feat/a-core-that-cannot-fail-silently-phase-2-grants into main

2026-10-06 10:30:28 +00:00

Author	SHA1	Message	Date
jochen	bbe74f3fc2	Grant the genesis controller its lease and the secret-replaced event, and not what the machines say (hq to-be 45 Phase 2) The controller now composes a publish grant for its lease bucket ($KV.mesh-controller_lease.>), which it must write before it acts, and for the seat event secret-replaced (hq ADR 0228, mesh-controller #82); and it no longer publishes mesh.control.>: a machine's report has one writer, its node-engine, and the writers table refuses a second at composition. The installer's first user list must say what the controller derives, or a new mesh's first controller is refused its lease and serves without one.	2026-10-06 12:25:12 +02:00

Author

SHA1

Message

Date

jochen

bbe74f3fc2

Grant the genesis controller its lease and the secret-replaced event, and not what the machines say (hq to-be 45 Phase 2)

The controller now composes a publish grant for its lease bucket
($KV.mesh-controller_lease.>), which it must write before it acts, and for
the seat event secret-replaced (hq ADR 0228, mesh-controller #82); and it no
longer publishes mesh.control.>: a machine's report has one writer, its
node-engine, and the writers table refuses a second at composition. The
installer's first user list must say what the controller derives, or a new
mesh's first controller is refused its lease and serves without one.

2026-10-06 12:25:12 +02:00