jschoubben 966093d8d0 Hand a moved module by its manifest, its build and the machine, never by the vault's reading of its plan, so a node with no plan yet makes the plan that hands it (issue 1966) ...

The vault judged a module handed only when its assignment already carried a handing plan, and the node-engine followed
that word: a module with no plan was composed the old way, refused for a key only the provider's helper answers
(forge-account's ssh_alias), and so never got its plan. resolution.Handing is now the manifest, its build and the
machine alone; the vault's word is read only to say where the two disagree. A refusal of a file or an own secret the
provisioner's client should fill now says "handed module not handed" and why, never only the keys a binding lacks or a
secret to make.

Claude-Session: https://claude.ai/code/session_01JG73KJNrH5EgFXMKKYSrig

2026-11-04 09:41:10 +01:00

..

frombustest

A node names its provisioner client's account whenever a client runs there, filled files or not (issue 774)

2026-11-04 02:17:01 +01:00

testdata

The node-engine owns the composition it alone runs (H1, H2)

2026-11-02 18:24:05 +01:00

answer_rows_test.go

A module in InOwn wanted at a build of the new form has its build taken in: the reader and the composition fold by one rule (issue 1585)

2026-11-04 01:31:27 +01:00

answer.go

The node-engine finds the tool runner by what its manifest says (tool-runner), never by its name, pinned at mesh-sdk a973bfa (issue 774, the operator 2026-11-03)

2026-11-03 13:28:44 +01:00

export.go

The node-engine owns the composition it alone runs (H1, H2)

2026-11-02 18:24:05 +01:00

frombus_test.go

What a node keeps of a module as it runs, for a manifest that does not yet say it, is carried on the module's have by module, so the watchman raises its condition (ADR 0601 §4; review round 1, finding 3)

2026-11-03 14:02:01 +01:00

frombus.go

Hand a moved module by its manifest, its build and the machine, never by the vault's reading of its plan, so a node with no plan yet makes the plan that hands it (issue 1966)

2026-11-04 09:41:10 +01:00

held_rows_test.go

The node-engine finds the tool runner by what its manifest says (tool-runner), never by its name, pinned at mesh-sdk a973bfa (issue 774, the operator 2026-11-03)

2026-11-03 13:28:44 +01:00

keep.go

What a node keeps of a module as it runs, for a manifest that does not yet say it, is carried on the module's have by module, so the watchman raises its condition (ADR 0601 §4; review round 1, finding 3)

2026-11-03 14:02:01 +01:00

states.go

Take the catalogue's composition rules into the node-engine

2026-11-02 19:15:55 +01:00

twice.go

A node agent that meets a manifest which does not yet say it is the tool runner, or that its own secrets are the core's credentials, keeps what runs of it, its tool runner process and its sealed secrets alike, known by what runs and said; never composed without it (ADR 0601 §4)

2026-11-03 13:31:44 +01:00