jschoubben e3c3bb37d0 Give a mesh directory its mode and owner only through a descriptor, and gate what the walk refuses (issue 358) ...

A mesh directory outside every home was chmodded and chowned by path, so a
parent turned into a link between two applies carried root's chmod and chown
to the link's target. It is now made and changed through the descriptor of
the walk from / that follows a link only root alone could have made.

A directory that walk refuses is a refusal like the placement guard's
(review 47): judged before anything is applied, and again when the
directory is applied, used as found or not; refused at either point it gates
its module and refuses what is below it, so no file is written into the
link's target and the report does not say everything was attempted.

2026-10-12 14:00:53 +02:00

..

accounts

Judge a granted group by number, grant nothing a group cannot write, and keep the look bounded (hq ADR 0312, issue 537 review)

2026-10-12 12:53:42 +02:00

apply

Give a mesh directory its mode and owner only through a descriptor, and gate what the walk refuses (issue 358)

2026-10-12 14:00:53 +02:00

bootstrap

Say controller in the installer's and the token's words, as the glossary does

2026-10-08 01:46:21 +02:00

bundle

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

declaration

Judge a granted group by number, grant nothing a group cannot write, and keep the look bounded (hq ADR 0312, issue 537 review)

2026-10-12 12:53:42 +02:00

firewall

The mesh's own ban chain is a ban wherever it hangs; the front end's record is cited as 0180 (hq ADR 0186)

2026-10-02 18:42:16 +02:00

identity

Say controller in the installer's and the token's words, as the glossary does

2026-10-08 01:46:21 +02:00

image

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

inventory

Repoint ADR references after HQ consolidated 65 records to 23

2026-08-28 23:33:44 +02:00

link

Judge a node's directories read-only before the walk refuses any (issue 358)

2026-10-12 13:57:52 +02:00

liveness

Clear an old pass on a wait, and say a change of waits (review of #78)

2026-10-10 21:14:14 +02:00

meshcli

Bound what a refusal costs the engine, and let the busy tests fail instead of hang

2026-10-11 02:47:11 +02:00

network

Take a tick a little early as the network look's tick

2026-10-07 18:52:16 +02:00

outward

Every physical link faces outside, up or down

2026-10-02 11:53:53 +02:00

profile

Count the same meters the power module's sampler reads (hq ADR 0255)

2026-10-08 14:44:55 +02:00

reachable

Report what an adopted node holds, its firewall and what is reachable, and speak unasked when that changes (hq ADR 0100)

2026-09-22 17:22:31 +02:00

store

Refuse a declaration composed from an older assignment generation than the machine applied (hq issue 234)

2026-10-11 11:22:30 +02:00

system

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

tunnel

A taken tunnel's found configuration is retired once the take is proven (hq ADR 0119)

2026-09-27 00:47:57 +02:00

units

Say every failed unit, the module's and the machine's (hq issue 315)

2026-10-08 11:28:51 +02:00

upgrade

Believe a hand-over only signed by the mesh, and give it through no link (hq issue 356, review)

2026-10-09 19:45:00 +02:00

witness

Keep a replaced build reachable, and delete it only once no process runs from it (hq issue 289)

2026-10-07 02:45:08 +02:00