jschoubben d12bba0109 Give the kept-folder tests' folders an unprivileged owner when they run as root (hq ADR 0325) ...

The build seat runs merge-check as root, so every folder a test made was root's
data, which is never kept (§12), and 28 tests failed for that alone. A test's
folders now stand for an operator's: run as root, they are given to nobody before
they are judged. The root rule is unchanged.

2026-10-12 19:34:59 +02:00

..

accounts

Judge a granted group by number, grant nothing a group cannot write, and keep the look bounded (hq ADR 0312, issue 537 review)

2026-10-12 12:53:42 +02:00

apply

Give the kept-folder tests' folders an unprivileged owner when they run as root (hq ADR 0325)

2026-10-12 19:34:59 +02:00

bootstrap

Hold the trust-before-push order by a test, and refuse early what would stop it (issue 92)

2026-10-12 16:29:14 +02:00

bundle

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

declaration

Give every module an identity and keep shared folders through ACL entries (hq ADR 0325, issue 567)

2026-10-12 18:43:04 +02:00

firewall

The mesh's own ban chain is a ban wherever it hangs; the front end's record is cited as 0180 (hq ADR 0186)

2026-10-02 18:42:16 +02:00

identity

Say controller in the installer's and the token's words, as the glossary does

2026-10-08 01:46:21 +02:00

image

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

inventory

Repoint ADR references after HQ consolidated 65 records to 23

2026-08-28 23:33:44 +02:00

link

Hold what mounts a missing disk, and say entries the mesh could not take out (hq ADR 0325 re-review)

2026-10-12 19:03:02 +02:00

liveness

Clear an old pass on a wait, and say a change of waits (review of #78)

2026-10-10 21:14:14 +02:00

meshcli

Bound what a refusal costs the engine, and let the busy tests fail instead of hang

2026-10-11 02:47:11 +02:00

network

Take a tick a little early as the network look's tick

2026-10-07 18:52:16 +02:00

outward

Every physical link faces outside, up or down

2026-10-02 11:53:53 +02:00

profile

Count the same meters the power module's sampler reads (hq ADR 0255)

2026-10-08 14:44:55 +02:00

reachable

Report what an adopted node holds, its firewall and what is reachable, and speak unasked when that changes (hq ADR 0100)

2026-09-22 17:22:31 +02:00

store

Name a filesystem by its UUID, its kernel id or its source, and keep nothing that has no name (hq ADR 0325 fifth review)

2026-10-12 19:14:42 +02:00

system

Give every module an identity and keep shared folders through ACL entries (hq ADR 0325, issue 567)

2026-10-12 18:43:04 +02:00

tunnel

A taken tunnel's found configuration is retired once the take is proven (hq ADR 0119)

2026-09-27 00:47:57 +02:00

units

Say every failed unit, the module's and the machine's (hq issue 315)

2026-10-08 11:28:51 +02:00

upgrade

Believe a hand-over only signed by the mesh, and give it through no link (hq issue 356, review)

2026-10-09 19:45:00 +02:00

witness

Keep a replaced build reachable, and delete it only once no process runs from it (hq issue 289)

2026-10-07 02:45:08 +02:00