jschoubben a9c49724b5 A step gates its module, not the machine ...

A run-once container that does not complete stops the rest of that module's resources; everything
else on the machine is attempted, as every other shape already is (novox/hq ADR 0136). An action
still gates the machine — genesis is a row of them and they belong to no module. What was not
attempted is reported as skipped, because that and 'nothing to do' are different answers.

Without this, ADR 0135's derived preparation would let one module's unreachable database hold a
machine hostage — the fault 04-ISSUES/011 removed for everything else, and the reason the catalogue
migrates itself at start.

2026-09-28 15:38:19 +02:00

..

access_test.go

declaration: an access is mounted, and the host owns nothing about it

2026-09-05 22:19:33 +02:00

apply_test.go

Undeclaring gives a unit back the state it was found in, and removes a process the mesh made (hq ADR 0118, issue 130)

2026-09-27 00:21:25 +02:00

apply.go

A step gates its module, not the machine

2026-09-28 15:38:19 +02:00

archive.go

A user, bytes, and an archive — because most of what people install is

2026-08-30 03:22:38 +02:00

block_test.go

review: rebuild a file the mesh once wrote whole, keep links, give back a missing line end, and release a hold only after the write (hq issue 128)

2026-09-27 00:09:34 +02:00

block.go

review: rebuild a file the mesh once wrote whole, keep links, give back a missing line end, and release a hold only after the write (hq issue 128)

2026-09-27 00:09:34 +02:00

found_test.go

review: a unit whose file the mesh wrote is stopped when undeclared, and what was found survives a failed first apply (hq ADR 0118)

2026-09-27 00:41:02 +02:00

hold_test.go

A taken tunnel's found configuration is retired once the take is proven (hq ADR 0119)

2026-09-27 00:47:57 +02:00

hold.go

A service may omit its state, so unassigning an uplink module never stops the machine's network manager (hq ADR 0117)

2026-09-27 00:11:58 +02:00

inspect_scope_test.go

inspect by kind, not the ambiguous bare form — a same-named network stops a container from ever being found

2026-09-24 19:50:16 +02:00

into_test.go

Take a key or list member the host may have written itself as the mesh's, so undeclaring gives the file back (hq ADR 0102)

2026-09-22 19:57:15 +02:00

into.go

Take a key or list member the host may have written itself as the mesh's, so undeclaring gives the file back (hq ADR 0102)

2026-09-22 19:57:15 +02:00

mode_test.go

Refuse a declaration for the other mode, or older than the mesh's last, and say what an apply would change first

2026-09-23 23:15:28 +02:00

mode.go

Refuse a declaration for the other mode, or older than the mesh's last, and say what an apply would change first

2026-09-23 23:15:28 +02:00

opening_test.go

review: a unit whose file the mesh wrote is stopped when undeclared, and what was found survives a failed first apply (hq ADR 0118)

2026-09-27 00:41:02 +02:00

opening.go

Retire the found firewall only once the mesh's own filter is loaded on the machine (hq ADR 0100)

2026-09-22 19:54:43 +02:00

plan_test.go

review: a unit whose file the mesh wrote is stopped when undeclared, and what was found survives a failed first apply (hq ADR 0118)

2026-09-27 00:41:02 +02:00

plan.go

A taken tunnel's found configuration is retired once the take is proven (hq ADR 0119)

2026-09-27 00:47:57 +02:00

process_test.go

review: refuse a process named ".", ".." or with a leading dash, so removing one cannot delete the mesh's own directory (hq ADR 0118)

2026-09-27 00:41:02 +02:00

process.go

review: refuse a process named ".", ".." or with a leading dash, so removing one cannot delete the mesh's own directory (hq ADR 0118)

2026-09-27 00:41:02 +02:00

reads_test.go

Look at what a container mounts directly, accept a pre-upgrade label, and write the genesis secret without a newline

2026-09-23 23:40:27 +02:00

runonce_test.go

A step gates its module, not the machine

2026-09-28 15:38:19 +02:00

schedule_test.go

inspect by kind, not the ambiguous bare form — a same-named network stops a container from ever being found

2026-09-24 19:50:16 +02:00

schedule.go

Recreate a container when the content of a file it reads at creation changes

2026-09-23 23:40:27 +02:00

sealed_test.go

A user, bytes, and an archive — because most of what people install is

2026-08-30 03:22:38 +02:00

stateless_test.go

A service may omit its state, so unassigning an uplink module never stops the machine's network manager (hq ADR 0117)

2026-09-27 00:11:58 +02:00

takeover_test.go

review: a retired configuration that comes back is retired again on its first original, and only wg-quick's own file is ever removed (hq ADR 0119)

2026-09-27 00:55:50 +02:00

takeover.go

review: a retired configuration that comes back is retired again on its first original, and only wg-quick's own file is ever removed (hq ADR 0119)

2026-09-27 00:55:50 +02:00

user_numeric_test.go

An owner may be a number the machine has never heard of

2026-09-01 23:45:02 +02:00

user_unix.go

A user, bytes, and an archive — because most of what people install is

2026-08-30 03:22:38 +02:00

user.go

An owner may be a number the machine has never heard of

2026-09-01 23:45:02 +02:00

vocabulary_test.go

the spec names the resolver and the address

2026-09-25 23:51:30 +02:00