jochen 021d860ca4 Vouch for the account that runs mesh-cli, and ask the controller its line (hq ADR 0272) ...

The records send the operator to "the controller's terminal", and nothing
reaches it (hq issue 343). mesh-cli holds no credential: it asks the engine
on its own machine over a socket. The engine reads the asking account from
the kernel (SO_PEERCRED), never from the program, and asks the controller on
mesh.control.<node>.cli, its own node's subject, so the bus server says which
node asked. The controller decides what the line may do; nothing received
on the socket is run or applied here, and the socket has no network address
(ADR 0004 stands).

The local protocol is the SDK's go/cli package, at a pseudo-version of its
branch until that merges and is tagged go/v0.1.8.

2026-10-09 12:05:53 +02:00

..

testdata

Roll a core build back by a witness that is not the new build (hq to-be 45 Phase 4)

2026-10-06 18:23:56 +02:00

asked_test.go

Say again what was last applied when the mesh asks (hq to-be 45 Phase 3, the report verb)

2026-10-06 14:05:02 +02:00

asking_nats_test.go

Enrolment behind a seam, with both transports

2026-09-27 01:31:46 +02:00

asking_nats.go

A node can join the bus the mesh runs on

2026-09-29 17:36:59 +02:00

asking.go

One bus: the AMQP transport is gone from the host

2026-09-28 03:54:22 +02:00

asktool_nats_test.go

Ask a declared tool check on the NATS link the node-engine holds

2026-10-08 16:44:01 +02:00

bus.go

Vouch for the account that runs mesh-cli, and ask the controller its line (hq ADR 0272)

2026-10-09 12:05:53 +02:00

enrol_again_test.go

An enrolling node asks again, with the same request, while the mesh says it cannot answer — for as long as the mesh holds the token for it (novox/hq issue 083)

2026-09-22 14:07:25 +02:00

enrol_proof_test.go

An enrolling node signs its request with the identity it just generated, so the mesh can tell it from anyone who knows its public key (novox/hq issue 083)

2026-09-22 14:33:31 +02:00

enrol_shape_test.go

A node generates the key it serves TLS with

2026-08-31 00:09:15 +02:00

enrol.go

Merge remote-tracking branch 'origin/main' into feat/nats-genesis

2026-09-27 18:38:45 +02:00

health_test.go

Ask a declared tool check on the NATS link the node-engine holds

2026-10-08 16:44:01 +02:00

hearing_nats_test.go

Apply through one queue, and order what is applied and reported (hq to-be 45 Phase 2)

2026-10-06 11:54:10 +02:00

hearing_nats.go

Say a tool check's errors once and as they stand, and test the link on a real bus

2026-10-08 17:01:15 +02:00

hearing.go

Say again what was last applied when the mesh asks (hq to-be 45 Phase 3, the report verb)

2026-10-06 14:05:02 +02:00

held_note_test.go

An apply says what it held, not only what it applied

2026-09-30 08:46:19 +02:00

messages_test.go

Hold the network statement's field names on the engine's side (hq ADR 0241)

2026-10-07 18:53:21 +02:00

messages.go

Say every directory used as found, let a person hand it over, and refuse the runtime's data and any .ssh

2026-10-09 00:28:01 +02:00

newest_test.go

Apply through one queue, and order what is applied and reported (hq to-be 45 Phase 2)

2026-10-06 11:54:10 +02:00

order_test.go

Apply through one queue, and order what is applied and reported (hq to-be 45 Phase 2)

2026-10-06 11:54:10 +02:00

pinned_test.go

A first node gets as far as its own bus: three faults on the way

2026-09-29 15:42:43 +02:00

pinned.go

A first node gets as far as its own bus: three faults on the way

2026-09-29 15:42:43 +02:00

queue_test.go

Apply through one queue, and order what is applied and reported (hq to-be 45 Phase 2)

2026-10-06 11:54:10 +02:00

queue.go

Vouch for the account that runs mesh-cli, and ask the controller its line (hq ADR 0272)

2026-10-09 12:05:53 +02:00

replay331_test.go

Add the replay of issue 331, so a tool check refused as no link fails before a merge

2026-10-08 17:10:29 +02:00

roused_test.go

A machine that wakes or moves says so, instead of waiting to be told

2026-08-31 10:21:26 +02:00

run.go

Say again what was last applied when the mesh asks (hq to-be 45 Phase 3, the report verb)

2026-10-06 14:05:02 +02:00

unsaid_test.go

Apply through one queue, and order what is applied and reported (hq to-be 45 Phase 2)

2026-10-06 11:54:10 +02:00

witnessing_nats_test.go

Roll a core build back by a witness that is not the new build (hq to-be 45 Phase 4)

2026-10-06 18:23:56 +02:00

witnessing.go

Say a tool check's errors once and as they stand, and test the link on a real bus

2026-10-08 17:01:15 +02:00