jschoubben b92fb68116 Judge a node's directories read-only before the walk refuses any (issue 358) ...

Once a mesh directory's mode and owner go only through a walk that follows no
link another account could make, a directory behind such a link is refused
and its module gated: on the control-node that could stop the controller.
The operator is to be told which directories that walk would refuse on every
node before it lands. So the engine judges the declaration it keeps with the
same walk, making and changing nothing: on a signed ask from the controller
(mesh.node.<node>.ask.judge-directories, held to the hand-over's checks) and
as `nox-mesh-host judge-directories` at the machine.

2026-10-12 13:57:52 +02:00

..

testdata

Roll a core build back by a witness that is not the new build (hq to-be 45 Phase 4)

2026-10-06 18:23:56 +02:00

asked_test.go

Say again what was last applied when the mesh asks (hq to-be 45 Phase 3, the report verb)

2026-10-06 14:05:02 +02:00

asking_nats_test.go

Enrolment behind a seam, with both transports

2026-09-27 01:31:46 +02:00

asking_nats.go

A node can join the bus the mesh runs on

2026-09-29 17:36:59 +02:00

asking.go

One bus: the AMQP transport is gone from the host

2026-09-28 03:54:22 +02:00

asktool_nats_test.go

State a tool check that waits for the operator as waiting (issue 386, ADR 0283)

2026-10-10 21:11:02 +02:00

bus.go

Vouch for the account that runs mesh-cli, and ask the controller its line (hq ADR 0272)

2026-10-09 12:05:53 +02:00

enrol_again_test.go

An enrolling node asks again, with the same request, while the mesh says it cannot answer — for as long as the mesh holds the token for it (novox/hq issue 083)

2026-09-22 14:07:25 +02:00

enrol_proof_test.go

An enrolling node signs its request with the identity it just generated, so the mesh can tell it from anyone who knows its public key (novox/hq issue 083)

2026-09-22 14:33:31 +02:00

enrol_shape_test.go

A node generates the key it serves TLS with

2026-08-31 00:09:15 +02:00

enrol.go

Merge remote-tracking branch 'origin/main' into feat/nats-genesis

2026-09-27 18:38:45 +02:00

handover_test.go

Believe a hand-over only signed by the mesh, and give it through no link (hq issue 356, review)

2026-10-09 19:45:00 +02:00

handover.go

Judge a node's directories read-only before the walk refuses any (issue 358)

2026-10-12 13:57:52 +02:00

health_test.go

State a tool check that waits for the operator as waiting (issue 386, ADR 0283)

2026-10-10 21:11:02 +02:00

hearing_nats_test.go

Apply through one queue, and order what is applied and reported (hq to-be 45 Phase 2)

2026-10-06 11:54:10 +02:00

hearing_nats.go

Judge a node's directories read-only before the walk refuses any (issue 358)

2026-10-12 13:57:52 +02:00

hearing.go

Say again what was last applied when the mesh asks (hq to-be 45 Phase 3, the report verb)

2026-10-06 14:05:02 +02:00

held_note_test.go

An apply says what it held, not only what it applied

2026-09-30 08:46:19 +02:00

judge_directories_test.go

Judge a node's directories read-only before the walk refuses any (issue 358)

2026-10-12 13:57:52 +02:00

messages_test.go

Judge whether an account declared never to become root can, so a machine's agents are known confined

2026-10-09 10:07:35 +02:00

messages.go

Grant a read-write access's path group to what runs the module's code, so a module can write shared data without the mesh changing it (hq ADR 0312, issue 537)

2026-10-12 12:23:38 +02:00

newest_test.go

Apply through one queue, and order what is applied and reported (hq to-be 45 Phase 2)

2026-10-06 11:54:10 +02:00

order_test.go

Apply through one queue, and order what is applied and reported (hq to-be 45 Phase 2)

2026-10-06 11:54:10 +02:00

pinned_test.go

A first node gets as far as its own bus: three faults on the way

2026-09-29 15:42:43 +02:00

pinned.go

A first node gets as far as its own bus: three faults on the way

2026-09-29 15:42:43 +02:00

queue_test.go

Refuse a declaration composed from an older assignment generation than the machine applied (hq issue 234)

2026-10-11 11:22:30 +02:00

queue.go

Judge a node's directories read-only before the walk refuses any (issue 358)

2026-10-12 13:57:52 +02:00

replay331_test.go

State a tool check that waits for the operator as waiting (issue 386, ADR 0283)

2026-10-10 21:11:02 +02:00

roused_test.go

A machine that wakes or moves says so, instead of waiting to be told

2026-08-31 10:21:26 +02:00

run.go

Judge a node's directories read-only before the walk refuses any (issue 358)

2026-10-12 13:57:52 +02:00

setuid_search_test.go

Show how far the setuid search got, and start a fresh one when the terminal asks (hq issue 361)

2026-10-10 01:55:58 +02:00

unsaid_test.go

Apply through one queue, and order what is applied and reported (hq to-be 45 Phase 2)

2026-10-06 11:54:10 +02:00

witnessing_nats_test.go

Roll a core build back by a witness that is not the new build (hq to-be 45 Phase 4)

2026-10-06 18:23:56 +02:00

witnessing.go

Say a tool check's errors once and as they stand, and test the link on a real bus

2026-10-08 17:01:15 +02:00