L3: the vault mints bus accounts, the grants part and the node seat node-engine (issue 774, ADR 0561), rebased onto L2 #126

2026-10-28T22:20:52Z

mesh-tools commented

2026-10-28 22:20:52 +00:00

L3 (issue 774, ADR 0561), rebased onto L2.

One group with mesh-delivery, mesh-catalog, mesh-host and hq, all on the branch feat/774-vault-mints-l2 (the old feat/774-vault-mints holds stale commits). This head 8eafc0c is the reviewed 4e6e5cc rebased onto main with #120 and #121, unchanged otherwise; every member pins it exactly.

This pull request carries the same head as #123 on a branch of its own, so it is checked and merged before the group: in the group a mesh-sdk member asks every reader module to read the group's manifests, and a stand-by controller build pinning an older mesh-sdk cannot read the assigner's mesh-placement claim (the same way through as the seed fix). The four members pin 8eafc0c and pass their check once this merges.

Under L2: the placement reader (delivery.Placed, buildrun.ToolchainGate) names the seat mesh-placement's state held by the assigner; the seat count is 49 (mesh-placement, mesh-delivery-checker, node-engine).

Tests: 1682 unit, 42 integration (approved head: 1683, 42).

Reviewed-by: rev-l2@shanks at 8eafc0c5ce

L3 (issue 774, ADR 0561), rebased onto L2. One group with mesh-delivery, mesh-catalog, mesh-host and hq, all on the branch feat/774-vault-mints-l2 (the old feat/774-vault-mints holds stale commits). This head 8eafc0c is the reviewed 4e6e5cc rebased onto main with #120 and #121, unchanged otherwise; every member pins it exactly. This pull request carries the same head as #123 on a branch of its own, so it is checked and merged before the group: in the group a mesh-sdk member asks every reader module to read the group's manifests, and a stand-by controller build pinning an older mesh-sdk cannot read the assigner's mesh-placement claim (the same way through as the seed fix). The four members pin 8eafc0c and pass their check once this merges. Under L2: the placement reader (delivery.Placed, buildrun.ToolchainGate) names the seat mesh-placement's state held by the assigner; the seat count is 49 (mesh-placement, mesh-delivery-checker, node-engine). Tests: 1682 unit, 42 integration (approved head: 1683, 42). Reviewed-by: rev-l2@shanks at 8eafc0c5ce3cbb54a1a0b8a07beb55eab058a155

mesh-tools added 22 commits 2026-10-28 22:20:52 +00:00

Say which bus accounts the grants part wants, in a state only the vault reads, and what the vault says when it mints one, so the vault can mint from the grants part's word (issue 774, ADR 0561 §2) da506bb3b8

Build a minted account's value as the controller does, byte for byte, so a runtime reads the vault's unchanged (issue 774, ADR 0561 §2) 8d9b3f779d

Say when the lease is handed away, let the vault and the grants part read it, and let the grants part create the consumers an account needs, so both turn on at the lease write alone (issue 774, ADR 0561 §3, §6) fefa8b88ea

Name the vault's verb issue-account on its seat, so its holder may serve it (issue 774, ADR 0561 §9) 1d4637e46b

Seat mesh-delivery-checker: the try and its read are verbs of the checker's own seat, replacing sh merge-check.sh (ADR 0547 §10, issue 774) 9b5657a3d6

Checker seat: the try's end by hand is a verb too (issue 774) 3ed9a0e342

Checker seat test: fold into the closed-set seats test, no new test function (issue 774) 54b17164ef

delivery: the grants part's grant keys and the source the assigner reads (a1; issue 774) a1a688b19e

Why: the grants part writes grants.<module>.<fp> in shadow beside the controller's; the assigner switches source only when the lease is handed away.

buscompose: the assigner may read the controller's lease, to choose where grants are read from (issue 774) 0062bdc4a6

Checker seat: the try's verb also replaces docker run postgres, as the controller's try did (ADR 0547 §10, issue 774) b3100c55a1

Checker seat test: the try replaces both shell commands (issue 774) 10d4d2f845

One reader of the catalogue's placement and the toolchain gate over it, in place of the three copies over the controller's assignments (issue 774, ADR 0549 §3, issue 1940); the assigner may read the lease (ADR 0549 §5) 1386219d4d

Placed: a module in the first revision heard of a node's key stands since before it, so the seed's placement does not leave out what already ran (issue 774) 18a47ac3c7

The vault signs: the contract of its state signers, its verb sign and its event signed, a node's grants to ask it and to read what it trusts, and the authority composed as a bundle (issue 774, ADR 0550 §2) d6db3f38e6

Bundle the mesh's authorities by certificate, and check a node's certificate against every one a bundle holds (issue 774, ADR 0550 §2) 3a8997c58a

The node seat node-engine: held by every node's engine, its six verbs and three events, and no module may claim it (issue 774, ADR 0563 §1) 222d605f6f

A node's engine answers its own node's node-engine verbs, says the seat's events and asks the operator as node-engine-<node>, and no other account answers them (issue 774, ADR 0563 §1, §3, §6) 79231a9e6c

A module's trusted list of callers in the SDK, so the vault's secret-ask answers the callers its manifest names as the runtime proved them (issue 774, ADR 0563 §8) 82c54870ed

The vault's secret-ask is said to answer the callers its manifest names (issue 774, ADR 0563 §8) 63607ba169

The node-engine's declared state acts: created by the grants part as a placed module's, its manifest placed on every node, and written by each node's engine under its own keys alone (issue 774, ADR 0563 §2, §3) 2323ba19db

The node seat's acts reads one act by its id (issue 774, ADR 0563 §9) 50de0a5a71

The placement reader names the seat mesh-placement's state, held by the assigner, as L2 moved it (issue 774, ADR 0567)

mesh/delivery-group group feat/774-vault-mints-l2 checking: the checker's verdict is out of date: novox/mesh-delivery@f6df07605dd0 was judged on trunk 5b2e5bc5…

Details

mesh/delivery merged: source.main moved to novox/mesh-sdk@d747c1128e42

Details

mesh/check checking 8eafc0c5ce3c on d747c1128e42

8eafc0c5ce

mesh-tools referenced this pull request

2026-10-28 22:21:17 +00:00

L3: the vault mints bus accounts, the grants part and the node seat node-engine (issue 774, ADR 0561), rebased onto L2 #123

mesh-tools commented

2026-10-28 22:21:35 +00:00

Delivery novox/mesh-sdk@8eafc0c5ce3c — merged since 2026-10-28T22:27:41Z

Source — source.main moved to novox/mesh-sdk@d747c1128e. Whether it reached the machines is mesh-delivery-view's, derived from source.main, the wants and the haves.

Transitions

2026-10-28 22:21 (new) → proposed (announced): novox/mesh-sdk#126's head announced; #123 with the same head closed unmerged
2026-10-28 22:21 proposed → ready (accepted): a verdict names this commit and the trunk's head as its trunk commit, the gate passed or warned, and the repository's own check did not fail; or the check gates no merge (check-gates-merge false)
2026-10-28 22:27 ready → merged (merged): on the trunk its modules follow: merged there

The commit's note under refs/notes/mesh-plan keeps every transition of this change up to its merge: git log --notes=mesh-plan.

**Delivery** `novox/mesh-sdk@8eafc0c5ce3c` — **merged** since 2026-10-28T22:27:41Z **Source** — source.main moved to novox/mesh-sdk@d747c1128e42. Whether it reached the machines is `mesh-delivery-view`'s, derived from `source.main`, the wants and the haves. **Transitions** - 2026-10-28 22:21 (new) → proposed (announced): novox/mesh-sdk#126's head announced; #123 with the same head closed unmerged - 2026-10-28 22:21 proposed → ready (accepted): a verdict names this commit and the trunk's head as its trunk commit, the gate passed or warned, and the repository's own check did not fail; or the check gates no merge (check-gates-merge false) - 2026-10-28 22:27 ready → merged (merged): on the trunk its modules follow: merged there The commit's note under `refs/notes/mesh-plan` keeps every transition of this change up to its merge: `git log --notes=mesh-plan`.

mesh-tools merged commit d747c1128e into main

2026-10-28 22:27:37 +00:00

mesh-tools deleted branch feat/774-vault-mints-sdk

2026-10-28 22:27:37 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: novox/mesh-sdk#126