Remove the inert MESH_SEAL_KEY; cite ADR 0048 correctly #30

2026-09-17T20:02:39Z

jschoubben commented

2026-09-17 20:02:39 +00:00

ADR 0048 retired the symmetric seal: a provider is handed the credential the mesh minted (sealed to the provider node, unsealed by the host into a 0600 file). The lab-only MESH_SEAL_KEY injections were read by nothing — two-node-db went green on the superuser delivery, not the seal key. Removed from two-node-db; provider-uses-mesh-credential's citations corrected 0053 → 0048.

https://claude.ai/code/session_01D6qtiYU3P9jk3pnAXyAFyx

ADR 0048 retired the symmetric seal: a provider is handed the credential the mesh minted (sealed to the provider node, unsealed by the host into a 0600 file). The lab-only `MESH_SEAL_KEY` injections were read by nothing — two-node-db went green on the superuser delivery, not the seal key. Removed from two-node-db; `provider-uses-mesh-credential`'s citations corrected 0053 → 0048. https://claude.ai/code/session_01D6qtiYU3P9jk3pnAXyAFyx

jschoubben added 1 commit 2026-09-17 20:02:39 +00:00

Remove the inert MESH_SEAL_KEY, and cite the ADR that retired it correctly 2438883a5f

ADR 0048 (2026-09-05) settled that a provider is handed the credential the mesh minted —
sealed to the provider node, unsealed by the host into a 0600 file — and removed the
symmetric seal from the SDK entirely; hq issue 032 records it resolved. The lab-only
MESH_SEAL_KEY injections were tombstones read by nothing: two-node-db went green on the
superuser delivery, not the seal key. Removed, and provider-uses-mesh-credential's
citations corrected from ADR 0053 (a scheduled step) to ADR 0048.

https://claude.ai/code/session_01D6qtiYU3P9jk3pnAXyAFyx

jschoubben merged commit e3d96d9fa9 into main

2026-09-17 20:02:45 +00:00

jschoubben deleted branch cleanup/seal-key-tombstones

2026-09-17 20:02:45 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: novox/mesh-lab#30