Merge pull request 'Registry milestone: mesh-sdk (issue 1966)' (#167 ) from feat/registry-milestone into main

CAPTURED names the mesh-delivery head the captured seat file is from
Claude-Session: https://claude.ai/code/session_01NcbgfFSnn24M3GcqttoU7i
2026-11-07 14:18:43 +00:00 · 2026-11-07 03:42:27 +01:00 · 2026-11-07 03:19:28 +01:00 · 2026-11-07 03:19:11 +01:00 · 2026-11-07 03:19:03 +01:00 · 2026-11-07 02:17:34 +01:00
4 changed files with 280 additions and 1 deletions
@@ -140,6 +140,40 @@
          "ended"
        ]
      }
+    },
+    {
+      "name": "input",
+      "description": "A checking program's input the checker keeps, by the sha256 of its exact bytes: the facts of a check its verdict is asked of, or the heads its seat list is asked of, as a run ask names it (its input's verb and digest). Answers the digest and the bytes, base64; a digest it keeps no input of is an error. Asked by the build module that runs the program, as its manifest's invokes grants it. Read-only.",
+      "optional": true,
+      "input": {
+        "type": "object",
+        "properties": {
+          "digest": {
+            "type": "string",
+            "description": "the input's sha256, 64 lowercase hex digits, as the run ask names it"
+          }
+        },
+        "required": [
+          "digest"
+        ]
+      },
+      "answer": {
+        "type": "object",
+        "properties": {
+          "digest": {
+            "type": "string",
+            "description": "the digest asked"
+          },
+          "input": {
+            "type": "string",
+            "description": "the input's exact bytes, base64, so no encoding on the way changes a byte the digest covers"
+          }
+        },
+        "required": [
+          "digest",
+          "input"
+        ]
+      }
    }
  ],
  "description": "The merge check's tries: start one, read one, end one. The checker's own events stay under its own subjects (ADR 0620 §2).",
@@ -455,6 +489,65 @@
                    "to"
                  ]
                }
+              },
+              "judged-by": {
+                "type": "object",
+                "description": "the checking program that judged the check: where it was built, the key its build is kept under, whether this check's run built it, and the heads it read (ADR 0644, ADR 0656). Absent in a value written before it",
+                "properties": {
+                  "program": {
+                    "type": "object",
+                    "properties": {
+                      "repository": {
+                        "type": "string"
+                      },
+                      "commit": {
+                        "type": "string"
+                      },
+                      "dir": {
+                        "type": "string"
+                      },
+                      "package": {
+                        "type": "string"
+                      }
+                    },
+                    "required": [
+                      "repository",
+                      "commit",
+                      "dir",
+                      "package"
+                    ]
+                  },
+                  "key": {
+                    "type": "string",
+                    "description": "program- and 16 hex digits"
+                  },
+                  "built": {
+                    "type": "boolean"
+                  },
+                  "heads": {
+                    "type": "array",
+                    "items": {
+                      "type": "object",
+                      "properties": {
+                        "repository": {
+                          "type": "string"
+                        },
+                        "commit": {
+                          "type": "string"
+                        }
+                      },
+                      "required": [
+                        "repository",
+                        "commit"
+                      ]
+                    }
+                  }
+                },
+                "required": [
+                  "program",
+                  "key",
+                  "heads"
+                ]
              }
            },
            "required": [
@@ -140,6 +140,40 @@
          "ended"
        ]
      }
+    },
+    {
+      "name": "input",
+      "description": "A checking program's input the checker keeps, by the sha256 of its exact bytes: the facts of a check its verdict is asked of, or the heads its seat list is asked of, as a run ask names it (its input's verb and digest). Answers the digest and the bytes, base64; a digest it keeps no input of is an error. Asked by the build module that runs the program, as its manifest's invokes grants it. Read-only.",
+      "optional": true,
+      "input": {
+        "type": "object",
+        "properties": {
+          "digest": {
+            "type": "string",
+            "description": "the input's sha256, 64 lowercase hex digits, as the run ask names it"
+          }
+        },
+        "required": [
+          "digest"
+        ]
+      },
+      "answer": {
+        "type": "object",
+        "properties": {
+          "digest": {
+            "type": "string",
+            "description": "the digest asked"
+          },
+          "input": {
+            "type": "string",
+            "description": "the input's exact bytes, base64, so no encoding on the way changes a byte the digest covers"
+          }
+        },
+        "required": [
+          "digest",
+          "input"
+        ]
+      }
    }
  ],
  "description": "The merge check's tries: start one, read one, end one. The checker's own events stay under its own subjects (ADR 0620 §2).",
@@ -455,6 +489,65 @@
                    "to"
                  ]
                }
+              },
+              "judged-by": {
+                "type": "object",
+                "description": "the checking program that judged the check: where it was built, the key its build is kept under, whether this check's run built it, and the heads it read (ADR 0644, ADR 0656). Absent in a value written before it",
+                "properties": {
+                  "program": {
+                    "type": "object",
+                    "properties": {
+                      "repository": {
+                        "type": "string"
+                      },
+                      "commit": {
+                        "type": "string"
+                      },
+                      "dir": {
+                        "type": "string"
+                      },
+                      "package": {
+                        "type": "string"
+                      }
+                    },
+                    "required": [
+                      "repository",
+                      "commit",
+                      "dir",
+                      "package"
+                    ]
+                  },
+                  "key": {
+                    "type": "string",
+                    "description": "program- and 16 hex digits"
+                  },
+                  "built": {
+                    "type": "boolean"
+                  },
+                  "heads": {
+                    "type": "array",
+                    "items": {
+                      "type": "object",
+                      "properties": {
+                        "repository": {
+                          "type": "string"
+                        },
+                        "commit": {
+                          "type": "string"
+                        }
+                      },
+                      "required": [
+                        "repository",
+                        "commit"
+                      ]
+                    }
+                  }
+                },
+                "required": [
+                  "program",
+                  "key",
+                  "heads"
+                ]
              }
            },
            "required": [
@@ -12,7 +12,7 @@ repositories; before that it was mesh-controller's copy, which still held two mo

 mesh-catalog  b5dbfbb784507e211372a7c9640d91f7d6dadd84  modules/*/module.json, modules/*/files/**, modules/*/templates/**, predefined.json
 mesh-contracts 70fe186d7f5743e61f3ce2bbd97a8bfabc5b596e  the seat files of the eight bootstrapped seats held there (seats/, health-and-repair/seats/, operator-and-conversation/seats/), as seat.json.captured
-mesh-delivery 432df75997637542a441b3c8f855335c9070ebbd  contracts/seats/mesh-catalog and mesh-delivery-checker, as seat.json.captured (go/seatlist's bootstrap test)
+mesh-delivery 932e7ccf025513ec4fce38a534c2c38defbc6701  contracts/seats/mesh-catalog and mesh-delivery-checker, as seat.json.captured (go/seatlist's bootstrap test)
 mesh-host     cdcba9ca73755854d21e4e657d7e46c32b9b5265  internal/apply/placement_guard.go

 The two seat copies are put back the same way (git show <commit>:<file> > <file>.captured, the path kept). To move the others, from this repository's go/ directory, with the two repositories checked out beside mesh-sdk:
@@ -140,6 +140,40 @@
          "ended"
        ]
      }
+    },
+    {
+      "name": "input",
+      "description": "A checking program's input the checker keeps, by the sha256 of its exact bytes: the facts of a check its verdict is asked of, or the heads its seat list is asked of, as a run ask names it (its input's verb and digest). Answers the digest and the bytes, base64; a digest it keeps no input of is an error. Asked by the build module that runs the program, as its manifest's invokes grants it. Read-only.",
+      "optional": true,
+      "input": {
+        "type": "object",
+        "properties": {
+          "digest": {
+            "type": "string",
+            "description": "the input's sha256, 64 lowercase hex digits, as the run ask names it"
+          }
+        },
+        "required": [
+          "digest"
+        ]
+      },
+      "answer": {
+        "type": "object",
+        "properties": {
+          "digest": {
+            "type": "string",
+            "description": "the digest asked"
+          },
+          "input": {
+            "type": "string",
+            "description": "the input's exact bytes, base64, so no encoding on the way changes a byte the digest covers"
+          }
+        },
+        "required": [
+          "digest",
+          "input"
+        ]
+      }
    }
  ],
  "description": "The merge check's tries: start one, read one, end one. The checker's own events stay under its own subjects (ADR 0620 §2).",
@@ -455,6 +489,65 @@
                    "to"
                  ]
                }
+              },
+              "judged-by": {
+                "type": "object",
+                "description": "the checking program that judged the check: where it was built, the key its build is kept under, whether this check's run built it, and the heads it read (ADR 0644, ADR 0656). Absent in a value written before it",
+                "properties": {
+                  "program": {
+                    "type": "object",
+                    "properties": {
+                      "repository": {
+                        "type": "string"
+                      },
+                      "commit": {
+                        "type": "string"
+                      },
+                      "dir": {
+                        "type": "string"
+                      },
+                      "package": {
+                        "type": "string"
+                      }
+                    },
+                    "required": [
+                      "repository",
+                      "commit",
+                      "dir",
+                      "package"
+                    ]
+                  },
+                  "key": {
+                    "type": "string",
+                    "description": "program- and 16 hex digits"
+                  },
+                  "built": {
+                    "type": "boolean"
+                  },
+                  "heads": {
+                    "type": "array",
+                    "items": {
+                      "type": "object",
+                      "properties": {
+                        "repository": {
+                          "type": "string"
+                        },
+                        "commit": {
+                          "type": "string"
+                        }
+                      },
+                      "required": [
+                        "repository",
+                        "commit"
+                      ]
+                    }
+                  }
+                },
+                "required": [
+                  "program",
+                  "key",
+                  "heads"
+                ]
              }
            },
            "required": [
Author	SHA1	Message	Date
mesh-tools	396511b7a2	Merge pull request 'Registry milestone: mesh-sdk (issue 1966)' (#167 ) from feat/registry-milestone into main	2026-11-07 14:18:43 +00:00
jschoubben	d932546703	CAPTURED names the mesh-delivery head the captured seat file is from mesh/delivery merged: source.main moved to novox/mesh-sdk@396511b7a276 Details mesh/delivery-group group feat/registry-milestone merged: every member is merged Details mesh/check checking d93254670307 on 396511b7a276 \| novox/mesh-sdk#167 in group feat/registry-milestone Claude-Session: https://claude.ai/code/session_01NcbgfFSnn24M3GcqttoU7i	2026-11-07 03:42:27 +01:00
jschoubben	0ae7b1ac17	The captured mesh-delivery seat file follows its contracts (ADR 0635 §3) Claude-Session: https://claude.ai/code/session_01NcbgfFSnn24M3GcqttoU7i	2026-11-07 03:19:28 +01:00
jschoubben	4cb94239dc	The seat-list test fixture follows the checker definition (ADR 0635 §3) Claude-Session: https://claude.ai/code/session_01NcbgfFSnn24M3GcqttoU7i	2026-11-07 03:19:11 +01:00
jschoubben	b62647147d	Bootstrapped mesh-delivery-checker definition equals its contracts file at mesh-delivery 112ca63f (ADR 0635 §3) Claude-Session: https://claude.ai/code/session_01NcbgfFSnn24M3GcqttoU7i	2026-11-07 03:19:03 +01:00
jschoubben	5c24cc4dae	Merge the trunk: the registry's deletions of buildstep, composer and delivery stand; checker_seat.go stays the deprecated name (issue 1921, issue 1966) Claude-Session: https://claude.ai/code/session_01NcbgfFSnn24M3GcqttoU7i	2026-11-07 02:17:34 +01:00
mesh-tools	54aff0a3d9	Merge pull request 'The build seat's ask run and the checker seat's verb input: a checking program built from a change (issue 1921, B0)' (#170 ) from feat/b0-checking-program into main	2026-11-07 00:32:39 +00:00
mesh-tools	c1b50e99a6	Merge pull request 'Checker seat: the verb input, delivered ahead of B0 so the running indexer knows it (issue 1921)' (#171 ) from fix/1921-checker-input-verb into main	2026-11-07 00:04:33 +00:00
jschoubben	070e1030d8	Checker seat: the verb input, ahead of B0, so the running indexer knows it when B0's manifests invoke and serve it (issue 1921) mesh/delivery merged: source.main moved to novox/mesh-sdk@c1b50e99a639 Details mesh/check pass 070e1030d887 on c1b50e99a639 \| carried from a0e5530aef1b \| unit 310 run, 350 kept, 1 skipped \| integration 309 run, 383 kept, 1 skippe… B0's first group check failed because the running indexer, built at this trunk, refused mesh-build-go (invokes seat:mesh-delivery-checker.input) and mesh-delivery-checker (serves input), and the check's composition took that refusal. Publishing the verb first rebuilds the indexer (ADR 0573 §3); B0 then checks as reviewed. The lines are B0's own, reviewed at `1b073c23`. Claude-Session: https://claude.ai/code/session_01NcbgfFSnn24M3GcqttoU7i	2026-11-07 00:52:59 +01:00
jschoubben	1b073c23c2	A run's input is asked of a verb of the asker's seat, never read from its state (issue 1921, B0 review round 1) mesh/delivery merged: source.main moved to novox/mesh-sdk@54aff0a3d920 Details mesh/delivery-group group feat/b0-checking-program merged: every member is merged Details mesh/check being carried to 1b073c23c2a5 on 54aff0a3d920 \| from c1b50e99a639, hq 885099eebbbd, mesh-catalog 980ade933853, mesh-delivery 2d201f781ced The operator's answer: a build module reading the checker's state broke ADR 0596 §2. RunInput names the seat verb it is served on (seat:<seat>.<verb>), RunInput.Read asks it and takes only the bytes named, and the seat mesh-delivery-checker defines the verb input (RunInputAsk, RunInputAnswer). Claude-Session: https://claude.ai/code/session_01NcbgfFSnn24M3GcqttoU7i	2026-11-06 23:33:13 +01:00
jschoubben	bdf44cd8e0	A run ask's step says which program it runs, from where, with which arguments, over how many heads (issue 1921) Claude-Session: https://claude.ai/code/session_01NcbgfFSnn24M3GcqttoU7i	2026-11-06 22:23:30 +01:00
jschoubben	5cd8bf9520	Bound a run's input by the bus's value limit, 256 KiB (issue 1921) The lead's ruling on milestone 47/B0: each referenced input is bounded by the value limit the design already uses. Claude-Session: https://claude.ai/code/session_01NcbgfFSnn24M3GcqttoU7i	2026-11-06 22:10:10 +01:00
jschoubben	336fd73b8b	Name the checking program that judged a verdict (issue 1921) The verdict gains judged-by: where the checking program was built, the key its build is kept under and the heads it read, so the checker's reads say who judged a check (ADR 0644, design 47's bootstrap delivery). Claude-Session: https://claude.ai/code/session_01NcbgfFSnn24M3GcqttoU7i	2026-11-06 22:07:41 +01:00
jschoubben	0364fcccc0	Keep a composer request's seats through the decode, the fill and the marshal (issue 1921) A build module that fills a request re-marshals it, and without the field it dropped the seat list the trunk's manifest validator reads, so the validator never got one (milestone 47/B0, ADR 0636 §4, ADR 0644). Claude-Session: https://claude.ai/code/session_01NcbgfFSnn24M3GcqttoU7i	2026-11-06 22:07:41 +01:00
jschoubben	ceb319fb86	Add the build seat's ask run: a program built from a change, run over the heads (issue 1921) A run ask has a program built at a commit and run in the build seat's sandbox over named heads, its input kept by the asker by digest and measured against a bound before asking (ADR 0644, ADR 0656; design 47's ask run). The checker asks it for the checking program in milestone 47/B0. Claude-Session: https://claude.ai/code/session_01NcbgfFSnn24M3GcqttoU7i	2026-11-06 22:06:09 +01:00
mesh-tools	a0e5530aef	Merge pull request 'A composer is kept per the package versions it was built with (issue 1921)' (#169 ) from fix/1921-zero-version-builds into main	2026-11-06 08:00:15 +00:00