Carry every node's name on a check ask to the names check, so no repository lists them (ADR 0567 §12, issue 1126)

go/delivery/stepasks_test.go

@@ -24,7 +24,8 @@ func checkAsk() StepAsk {
 	return StepAsk{ID: "mh3k2x9qa1b2c4", Kind: AskCheck, Language: AskNode, Asker: "mesh-delivery-checker",
 		At: time.Date(2026, 10, 23, 13, 0, 0, 0, time.UTC),
 		Check: &CheckJob{Fetch: map[string]any{"repository": "novox/mesh-catalog", "commit": askCommit, "ref": "refs/pull/3/head", "base": askCommit},
-			Levels: []string{LevelUnit, LevelIntegration}, Kept: true, Runner: "workspace", RunnerWhen: "modules/mesh-build-go/", Run: ""}}
+			Levels: []string{LevelUnit, LevelIntegration}, Kept: true, Runner: "workspace", RunnerWhen: "modules/mesh-build-go/", Run: "",
+			NodeNames: []string{"anchor", "laptop"}}}
 }
 
 // 1887/A1a: an ask encodes and decodes with every field.
@@ -65,6 +66,14 @@ func TestAskRefusesUnknownKindAndLanguage(t *testing.T) {
 			t.Errorf("%s: encoded", name)
 		}
 	}
+	// ADR 0567 §12: a check's node names are each a node name, once.
+	for _, names := range [][]string{{"anchor", "anchor"}, {"a.b"}, {""}, {"a,b"}} {
+		c := checkAsk()
+		c.Check.NodeNames = names
+		if _, err := EncodeStepAsk(c); err == nil {
+			t.Errorf("the node names %q: encoded", names)
+		}
+	}
 	// A copy alone fetches nothing and needs no path.
 	a := buildAsk()
 	a.Build.Fetch, a.Build.Path, a.Build.Artifacts = nil, "", []AskArtifact{{Artifact: "base", From: "registry/x@sha256:00"}}