jochen 0b4c86e3be Count a setuid find only where the account can execute it, read at every judgement (hq issue 361) ...

The two finds on the control-node sit in the operator's home of mode 0700, which the agent account cannot
search. The search keeps every find; each judgement reads the modes on the way again, since an account can
open its own home without root. A find in a home is said by count, its path in the journal alone. Also
from review: a checkpoint racing SearchNow forgets the walk it just kept, and a walk kept by an older engine
says its counts as lower bounds.

2026-10-10 02:00:10 +02:00

..

accounts

Count a setuid find only where the account can execute it, read at every judgement (hq issue 361)

2026-10-10 02:00:10 +02:00

apply

Keep the walk's paths as bytes, forget a walk root superseded, and leave other mounts unread (hq issue 361 review)

2026-10-10 01:10:56 +02:00

bootstrap

Say controller in the installer's and the token's words, as the glossary does

2026-10-08 01:46:21 +02:00

bundle

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

declaration

Judge whether an account declared never to become root can, so a machine's agents are known confined

2026-10-09 10:07:35 +02:00

firewall

The mesh's own ban chain is a ban wherever it hangs; the front end's record is cited as 0180 (hq ADR 0186)

2026-10-02 18:42:16 +02:00

identity

Say controller in the installer's and the token's words, as the glossary does

2026-10-08 01:46:21 +02:00

image

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

inventory

Repoint ADR references after HQ consolidated 65 records to 23

2026-08-28 23:33:44 +02:00

link

Show how far the setuid search got, and start a fresh one when the terminal asks (hq issue 361)

2026-10-10 01:55:58 +02:00

liveness

Say a tool check's errors once and as they stand, and test the link on a real bus

2026-10-08 17:01:15 +02:00

meshcli

mesh-cli: forward the line's standard input to the controller, with the line alone

2026-10-09 16:34:45 +02:00

network

Take a tick a little early as the network look's tick

2026-10-07 18:52:16 +02:00

outward

Every physical link faces outside, up or down

2026-10-02 11:53:53 +02:00

profile

Count the same meters the power module's sampler reads (hq ADR 0255)

2026-10-08 14:44:55 +02:00

reachable

Report what an adopted node holds, its firewall and what is reachable, and speak unasked when that changes (hq ADR 0100)

2026-09-22 17:22:31 +02:00

store

Give a service's held state its own field and key, so main compiles again

2026-10-09 03:03:58 +02:00

system

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

tunnel

A taken tunnel's found configuration is retired once the take is proven (hq ADR 0119)

2026-09-27 00:47:57 +02:00

units

Say every failed unit, the module's and the machine's (hq issue 315)

2026-10-08 11:28:51 +02:00

upgrade

Believe a hand-over only signed by the mesh, and give it through no link (hq issue 356, review)

2026-10-09 19:45:00 +02:00

witness

Keep a replaced build reachable, and delete it only once no process runs from it (hq issue 289)

2026-10-07 02:45:08 +02:00