Say when the lease is handed away, let the vault and the grants part read it, and let the grants part create the consumers an account needs, so both turn on at the lease write alone (issue 774, ADR 0561 §3, §6)

2026-10-28 21:54:04 +01:00
parent 8d9b3f779d
commit fefa8b88ea
8 changed files with 223 additions and 2 deletions
@@ -79,7 +79,9 @@ const VaultBusAccounts = "mesh-vault.bus-accounts"

 // NamedReaders are the states only the modules named may read, by `<owner>.<name>`: the grants part's wanted accounts
 // are read by the vault alone (novox/hq ADR 0561 §2).
-var NamedReaders = map[string][]string{VaultBusAccounts: {GrantsModule}, GrantsAccounts: {VaultSeat}}
+// The controller's lease is read by the two parts that turn on at its write (ADR 0561 §3, §6).
+var NamedReaders = map[string][]string{VaultBusAccounts: {GrantsModule}, GrantsAccounts: {VaultSeat},
+	ControllerLease: {VaultSeat, GrantsModule}}

 // ReaderMay says whether module may read the state read (`<owner>.<name>`) by the named readers: always, for a state
 // that names none.