4 Commits

Include renames

Author	SHA1	Message	Date
jschoubben	a076ccfe51	Run the proof of the operator's answers in the Go toolchain on every pull request, and say NOT RUN loudly where it cannot ... The review of 2026-10-09: the build seat runs the lab's merge-check.sh in the TypeScript toolchain, which holds no Go, so the proof never ran there. It is now a declared part of its own (mesh-check-also), run against the controller, runtime and catalogue cloned beside the lab; a missing clone or a controller without the proof's fixture is said NOT RUN in capitals instead of failing every lab change.	2026-10-09 12:02:28 +02:00
jschoubben	3a486014fc	Prove the operator's answers end to end before anybody uses them (hq ADR 0259) ... The bus the controller composes and raises, at its commit, for one machine; the mesh's runtime serving the router and the Telegram channel on their own credentials; a fake Bot API as the phone. It links the operator's account with the code shown on the desk, refuses an approval in the hour after a link, performs an approval exactly once with who and how in the warrant and the router's record, refuses a replayed tap and a redelivered warrant, tells the operator when another account answers, drops a tap from a group, does nothing on Decline and on expiry, offers no approval while an agent can become root where the channel runs, and has the bus refuse every forged warrant, ask and tap. live-acceptance.sh is the same after rollout, with a drill the operator approves on the phone.	2026-10-09 11:08:42 +02:00
jochen	c4f57432e1	Check the Go replays in the Go toolchain, and register R301 and R302 (hq issues 301, 302) ... The lab's check ran in the TypeScript toolchain, which holds no Go compiler, so the replays register was never compiled before a merge. merge-check.sh now declares replays/merge-check.sh as its Go part, which the build seat runs in the Go toolchain: gofmt, go vet and the register's own tests. Both new replays are proved: each fails on the commit before its fix and passes on it.	2026-10-08 00:13:46 +02:00
jochen	6b44d7c414	Check the lab's own code before it merges (hq ADR 0237) ... A merge-check.sh, the repository's layer of the mesh's merge check (mesh/repo-check), in the TypeScript toolchain: install from the lock file, type-check, the unit suite. The integration suite and the replays need a lab and the container runtime, which unapproved code is not given: said as not run, never passed silently.	2026-10-06 22:06:35 +02:00