Register R401: the send made a value for an own secret issued outside the mesh that nobody gave (hq issue 401)

Proved: fails on mesh-controller 1e28342^1, passes on 1e28342 (the fix, #262). The replay is mesh-controller #274's TestReplay401, since the fix's own test reads what the fix added.

replays/register.go

@@ -389,6 +389,20 @@ var Register = []Replay{
 		Asserts: "a check judges the head merged into the trunk's head, and fails a head whose merge does not compile, " +
 			"saying so",
 		Package: "./internal/builder", Test: "TestReplay341", Files: []string{"internal/builder/replay341_test.go"}},
+	// The mesh made a value for a secret only an outside party issues (2026-10-10): nobody had given the mounts
+	// module's smb-credentials, the send made a random value for it and placed it, and the module read it as a
+	// credential given and wrong (ADR 0228: such a secret is never made). The fix's own test reads what the fix added,
+	// so the replay is a test of its own in the controller, written with only what it had before the fix — register,
+	// assign, planFor, declarationFor, the inventory's secret reads — laid over the commit before. Needs a store:
+	// MESH_TEST_POSTGRES, as R237. Fix is the merge of its pull request (mesh-controller #262); Home is the commit that
+	// added the replay (mesh-controller #274), reachable once that pull request merges.
+	{ID: "R401", Issue: 401, Kind: InRepository, Repository: "mesh-controller", Fix: "1e28342edec170d59570e8127ddead7b19a70c20",
+		What: "the send made a random value for an own secret issued outside the mesh that nobody gave, and placed it: " +
+			"the module read it as a credential given and wrong",
+		Asserts: "the send makes no value for an own secret issued outside the mesh that nobody gave and places none, " +
+			"places no value the mesh made for it before, and places a value once a person gives one",
+		Package: "./cmd/mesh-controller", Test: "TestReplay401", Files: []string{"cmd/mesh-controller/replay401_test.go"},
+		Home: "mesh-controller", HomeRef: "f3c15e00af5004d053bc424fe01c7f9a24656d59"},
 }
 
 // Find is the replay of that id, or of that issue.