jochen d4af8bba1b Judge an opened file's kind and links below a home, and more ways to root ...

A hard link swapped in for ~/.claude would have had root chown another
account's file; fstat on the descriptor now refuses a second link, a fifo or
an unexpected kind before anything is changed (hq ADR 0266, the re-review).
The judge also finds polkit rules for every account, a runtime's API on TCP,
setgid-to-root programs whoever owns them, setuid programs on every suid
filesystem, and unprotected links; the rest is listed as not judged.

2026-10-09 10:07:52 +02:00

..

accounts

Judge an opened file's kind and links below a home, and more ways to root

2026-10-09 10:07:52 +02:00

apply

Judge an opened file's kind and links below a home, and more ways to root

2026-10-09 10:07:52 +02:00

bootstrap

Say controller in the installer's and the token's words, as the glossary does

2026-10-08 01:46:21 +02:00

bundle

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

declaration

Judge whether an account declared never to become root can, so a machine's agents are known confined

2026-10-09 10:07:35 +02:00

firewall

The mesh's own ban chain is a ban wherever it hangs; the front end's record is cited as 0180 (hq ADR 0186)

2026-10-02 18:42:16 +02:00

identity

Say controller in the installer's and the token's words, as the glossary does

2026-10-08 01:46:21 +02:00

image

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

inventory

Repoint ADR references after HQ consolidated 65 records to 23

2026-08-28 23:33:44 +02:00

link

Judge whether an account declared never to become root can, so a machine's agents are known confined

2026-10-09 10:07:35 +02:00

liveness

Say a tool check's errors once and as they stand, and test the link on a real bus

2026-10-08 17:01:15 +02:00

network

Take a tick a little early as the network look's tick

2026-10-07 18:52:16 +02:00

outward

Every physical link faces outside, up or down

2026-10-02 11:53:53 +02:00

profile

Count the same meters the power module's sampler reads (hq ADR 0255)

2026-10-08 14:44:55 +02:00

reachable

Report what an adopted node holds, its firewall and what is reachable, and speak unasked when that changes (hq ADR 0100)

2026-09-22 17:22:31 +02:00

store

Give a service's held state its own field and key, so main compiles again

2026-10-09 03:03:58 +02:00

system

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

tunnel

A taken tunnel's found configuration is retired once the take is proven (hq ADR 0119)

2026-09-27 00:47:57 +02:00

units

Say every failed unit, the module's and the machine's (hq issue 315)

2026-10-08 11:28:51 +02:00

upgrade

Roll a core build back by a witness that is not the new build (hq to-be 45 Phase 4)

2026-10-06 18:23:56 +02:00

witness

Keep a replaced build reachable, and delete it only once no process runs from it (hq issue 289)

2026-10-07 02:45:08 +02:00