jschoubben 20614822df F-host 2, ENG-5: the bootstrap's one-off push credential goes to distribution's account, mode 0600, only once the node-engine made that account and its state directory, so the holder's program can read it (review of issue 1966) ...

The owner is the account the manifest names for the directory that holds the file; the bootstrap no longer makes that
directory itself, and a run that reaches it first is refused naming what it waits on.

Claude-Session: https://claude.ai/code/session_01JG73KJNrH5EgFXMKKYSrig

2026-11-04 16:24:14 +01:00

..

accounts

Revert "Merge pull request 'Revert L3: its node-engine removed every held module on novox, the bus server among them (issue 774)' (#174) from revert/774-l3 into main"

2026-10-29 21:04:13 +01:00

agent

ENG-9: a failed have carries the pull it waits on, read through node_haves

2026-11-04 14:02:44 +01:00

apply

ENG-8, ENG-9, ENG-11: a failed pull from a store is tried again once per settled of the store's holder, heard on every node, and the failed have says whom it waits on and what triggered the last retry (design 51, issue 1966; needs mesh-sdk request R1, R2)

2026-11-04 11:49:44 +01:00

beside

Take the catalogue's composition rules into the node-engine

2026-11-02 19:15:55 +01:00

bootstrap

F-host 2, ENG-5: the bootstrap's one-off push credential goes to distribution's account, mode 0600, only once the node-engine made that account and its state directory, so the holder's program can read it (review of issue 1966)

2026-11-04 16:24:14 +01:00

bundle

Take the node-engine's parser from mesh-sdk: remaining imports (issue 1392)

2026-10-20 11:17:14 +00:00

compose

ENG-3, ENG-4: the node-engine keeps no seat table of its own (mesh-contracts' list through mesh-sdk), answers ${seat:...:reach} for both names of the store, and reads both reference forms in composition, image seat and bootstrap (ADR 0605 §9, design 26, issue 1966)

2026-11-04 12:11:34 +01:00

composer

The node-engine speaks operator-channel, mesh-vault and node-engine through their contracts and clients; it serves no pull-waits

2026-11-04 14:02:44 +01:00

filling

Remove the mesh-cli forward to the controller

2026-11-02 11:28:35 +01:00

firewall

Take the node-engine's parser from mesh-sdk: remaining imports (issue 1392)

2026-10-20 11:17:14 +00:00

identity

mesh-host enrol redeems through the seat mesh-enrolment and refuses an answer the token's key did not sign

2026-11-02 01:49:01 +01:00

image

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

inventory

Repoint ADR references after HQ consolidated 65 records to 23

2026-08-28 23:33:44 +02:00

judge

The node-engine owns the composition it alone runs (H1, H2)

2026-11-02 18:24:05 +01:00

link

ENG-9: a failed have carries the pull it waits on, read through node_haves

2026-11-04 14:02:44 +01:00

liveness

Apply a module again when the engine holds no record of its resources or its health says one is missing, and move a module with nothing to back up without a backup (issue 1944, issue 1945)

2026-10-25 10:59:21 +01:00

network

Write each node's health report into its own key of mesh-host_health on a change, so the watchman raises the machine's alerts without the controller (issue 774, the operator's alert table)

2026-10-29 22:56:14 +01:00

nodegrant

The node whole publishes its compositions and answers a candidate (H6)

2026-11-02 18:39:12 +01:00

outward

Report the networks the outward links are on, for the local network (issue 154, ADR 0340)

2026-10-13 11:20:21 +02:00

overlay

Merge five moved overlay tests into two, offsetting the tests this release adds

2026-11-02 18:39:51 +01:00

profile

The node-engine reports reads-wants; a failed apply is said; the have's fingerprint and digest follow its health (R6-A A6)

2026-10-24 16:43:26 +02:00

reachable

Report what an adopted node holds, its firewall and what is reachable, and speak unasked when that changes (hq ADR 0100)

2026-09-22 17:22:31 +02:00

selfcompose

The node-engine speaks operator-channel, mesh-vault and node-engine through their contracts and clients; it serves no pull-waits

2026-11-04 14:02:44 +01:00

store

Stop between applies and save the node's state as one writer, so a stop never cuts a save off and loses its records (issue 1585)

2026-11-04 10:36:48 +01:00

system

Drop the never-ran reading: a start timestamp of 0 does not mean a one-shot never ran (issue 1126)

2026-10-28 14:29:16 +01:00

takein

The node-engine owns the composition it alone runs (H1, H2)

2026-11-02 18:24:05 +01:00

tunnel

A taken tunnel's found configuration is retired once the take is proven (hq ADR 0119)

2026-09-27 00:47:57 +02:00

units

Take the node-engine's parser from mesh-sdk: remaining imports (issue 1392)

2026-10-20 11:17:14 +00:00

upgrade

Merge remote-tracking branch 'origin/main' into feat/r6

2026-10-24 23:00:09 +02:00

userlist

Read the bus's user-list file's place from what the node runs, not from the controller's compositions

2026-11-02 11:34:15 +01:00

validate

The node-engine owns the composition it alone runs (H1, H2)

2026-11-02 18:24:05 +01:00

witness

The witness judges the tool runner's process by its id, <its module>.runtime, which the composition gives only the module whose manifest says it is the tool runner, never by a name (ADR 0601 §4; review round 1, finding 4)

2026-11-03 14:02:01 +01:00