jschoubben c433e76de2 Judge a granted group by number, grant nothing a group cannot write, and keep the look bounded (hq ADR 0312, issue 537 review) ...

The engine is built without cgo, so a check by name missed a root group a name
service holds or one number carrying another name: the root groups are resolved
to numbers (now with kmem and shadow) and a number named nothing is refused for
containers too. A group without write is granted nothing (§2). The look reads
each path off the lock within five seconds, so a dead network mount cannot stop
every health statement. A grant's account may not start with a dash. A group a
record leaves for another asker is handed to it, so it is still taken back when
the last asker goes (§5). The scheduler skips paths issue 339's guard refuses.

2026-10-12 12:53:42 +02:00

..

adoption_test.go

Take over the found tunnel: its key, its port, its peers; stop it, never flush

2026-09-23 23:26:35 +02:00

block_test.go

review: rebuild a file the mesh once wrote whole, keep links, give back a missing line end, and release a hold only after the write (hq issue 128)

2026-09-27 00:09:34 +02:00

cron_test.go

One kind for the module's own code, with three modes

2026-09-15 10:26:31 +02:00

cron.go

apply: a scheduled step is a container run on a cadence (ADR 0053)

2026-09-06 14:08:44 +02:00

declaration_test.go

A container may log to the journal (hq ADR 0179)

2026-10-02 17:02:49 +02:00

declaration.go

Judge a granted group by number, grant nothing a group cannot write, and keep the look bounded (hq ADR 0312, issue 537 review)

2026-10-12 12:53:42 +02:00

emitted_check_test.go

A check that what the control plane emits is what this host accepts

2026-08-29 23:35:11 +02:00

health_test.go

Judge how a module says it is ready, beside whether it stays up (hq ADR 0240, to-be 48 Phase B)

2026-10-07 14:08:32 +02:00

health.go

Judge how a module says it is ready, beside whether it stays up (hq ADR 0240, to-be 48 Phase B)

2026-10-07 14:08:32 +02:00

into_test.go

Write into a file the machine shares instead of over it, and reload a service that re-reads its configuration instead of restarting it (hq ADR 0102)

2026-09-22 17:48:57 +02:00

order_test.go

Refuse a declaration composed from an older assignment generation than the machine applied (hq issue 234)

2026-10-11 11:22:30 +02:00

process_test.go

review: refuse a process named ".", ".." or with a leading dash, so removing one cannot delete the mesh's own directory (hq ADR 0118)

2026-09-27 00:41:02 +02:00

replaces_test.go

Hand a replaced resource over to the process that replaces it (hq issue 213)

2026-10-04 01:01:52 +02:00

root_test.go

Judge whether an account declared never to become root can, so a machine's agents are known confined

2026-10-09 10:07:35 +02:00

schedule_declaration_test.go

apply: a scheduled step is a container run on a cadence (ADR 0053)

2026-09-06 14:08:44 +02:00

stateless_test.go

A service may omit its state, so unassigning an uplink module never stops the machine's network manager (hq ADR 0117)

2026-09-27 00:11:58 +02:00

trusted_test.go

Accept and ignore a file's trusted, and give each runtime its own time to answer

2026-10-09 01:42:09 +02:00

userscope_test.go

A user unit waits for its account's manager, and lingering is the account's (hq ADR 0177)

2026-10-04 12:41:32 +02:00