Register R164: a credential only a person can give was made anyway (hq issue 164) #102

Merged
mesh-admin merged 2 commits from fix/164-replay into main 2026-10-13 11:21:00 +00:00
+13
View File
@@ -549,6 +549,19 @@ var Register = []Replay{
Package: "./cmd/mesh-controller", Test: "TestReplay348AFaultFromBeforeTheSendFailsNoGate",
Files: []string{"cmd/mesh-controller/replay348_test.go"},
Home: "mesh-controller", HomeRef: "6eea92c323f4862d4162f9d977c8783d8a62efc3"},
// A credential only a person can give was made anyway (found provisioning the media machine, re-checked
// 2026-10-08): a Servarr app's API key, an indexer's key and a downloader's password are held by the provider's
// software, and for each consumer of them the send made a random pair credential, sealed it to both ends and
// placed it; the provider refused it, and a consumer retrying it could be banned (ADR 0337: such a credential is
// never made). A test of its own in the controller, written with only what it had before the fix — register,
// assign, planFor, declarationFor, AcceptSecretForPair, SecretsOf — laid over the commit before. Needs a store:
// MESH_TEST_POSTGRES. Fix is the merge of its pull request (mesh-controller #298), which also added the replay.
{ID: "R164", Issue: 164, Kind: InRepository, Repository: "mesh-controller", Fix: "584aa2d7d7a5a68b5087970feb93d0b1f1d4f503",
What: "the send made a random pair credential for a provision whose credential only a person can give, and " +
"placed it: the provider refused it",
Asserts: "for a provision whose offer says its credential is issued outside the mesh, the send makes no value " +
"and places none, the consumer's machine still composes, and a value a person gave for the pair is placed",
Package: "./cmd/mesh-controller", Test: "TestReplay164", Files: []string{"cmd/mesh-controller/replay164_test.go"}},
// A README-only merge made a new digest of an unchanged Go program (2026-10-13): a module built from its
// repository's root is compiled with the clone's .git in view, and Go stamped the commit into the binary — the
// node-engine on the laptop carried vcs.revision=7a41e120… — so a rebuild of an unchanged build source was a new