jochen 3a727011ad Judge whether an account declared never to become root can, so a machine's agents are known confined ...

An account an agent runs as (novox/hq ADR 0266) is read on every look for a
uid of 0, a group that grants root, any sudo rule and a mesh secret it can
read; any way found is unhealthy and said, a read that fails is unknown.

2026-10-09 10:07:35 +02:00

..

adoption_test.go

Take over the found tunnel: its key, its port, its peers; stop it, never flush

2026-09-23 23:26:35 +02:00

block_test.go

review: rebuild a file the mesh once wrote whole, keep links, give back a missing line end, and release a hold only after the write (hq issue 128)

2026-09-27 00:09:34 +02:00

cron_test.go

One kind for the module's own code, with three modes

2026-09-15 10:26:31 +02:00

cron.go

apply: a scheduled step is a container run on a cadence (ADR 0053)

2026-09-06 14:08:44 +02:00

declaration_test.go

A container may log to the journal (hq ADR 0179)

2026-10-02 17:02:49 +02:00

declaration.go

Let a user say it never becomes root, so the agents' account can be judged

2026-10-09 10:07:35 +02:00

emitted_check_test.go

A check that what the control plane emits is what this host accepts

2026-08-29 23:35:11 +02:00

health_test.go

Judge how a module says it is ready, beside whether it stays up (hq ADR 0240, to-be 48 Phase B)

2026-10-07 14:08:32 +02:00

health.go

Judge how a module says it is ready, beside whether it stays up (hq ADR 0240, to-be 48 Phase B)

2026-10-07 14:08:32 +02:00

into_test.go

Write into a file the machine shares instead of over it, and reload a service that re-reads its configuration instead of restarting it (hq ADR 0102)

2026-09-22 17:48:57 +02:00

order_test.go

Apply through one queue, and order what is applied and reported (hq to-be 45 Phase 2)

2026-10-06 11:54:10 +02:00

process_test.go

review: refuse a process named ".", ".." or with a leading dash, so removing one cannot delete the mesh's own directory (hq ADR 0118)

2026-09-27 00:41:02 +02:00

replaces_test.go

Hand a replaced resource over to the process that replaces it (hq issue 213)

2026-10-04 01:01:52 +02:00

root_test.go

Judge whether an account declared never to become root can, so a machine's agents are known confined

2026-10-09 10:07:35 +02:00

schedule_declaration_test.go

apply: a scheduled step is a container run on a cadence (ADR 0053)

2026-09-06 14:08:44 +02:00

stateless_test.go

A service may omit its state, so unassigning an uplink module never stops the machine's network manager (hq ADR 0117)

2026-09-27 00:11:58 +02:00

trusted_test.go

Accept and ignore a file's trusted, and give each runtime its own time to answer

2026-10-09 01:42:09 +02:00

userscope_test.go

A user unit waits for its account's manager, and lingering is the account's (hq ADR 0177)

2026-10-04 12:41:32 +02:00