L3: the vault mints bus accounts, the grants part and the node seat node-engine (issue 774, ADR 0561), rebased onto L2 #126

Merged

mesh-tools merged 22 commits from feat/774-vault-mints-sdk into main 2026-10-28 22:27:37 +00:00

Conversation 1 Commits 22 Files Changed 31

+2079 -21

22 Commits

Author	SHA1	Message	Date
jschoubben	8eafc0c5ce	The placement reader names the seat mesh-placement's state, held by the assigner, as L2 moved it (issue 774, ADR 0567)	2026-10-28 21:54:04 +01:00
jschoubben	50de0a5a71	The node seat's acts reads one act by its id (issue 774, ADR 0563 §9)	2026-10-28 21:54:04 +01:00
jschoubben	2323ba19db	The node-engine's declared state acts: created by the grants part as a placed module's, its manifest placed on every node, and written by each node's engine under its own keys alone (issue 774, ADR 0563 §2, §3)	2026-10-28 21:54:04 +01:00
jschoubben	63607ba169	The vault's secret-ask is said to answer the callers its manifest names (issue 774, ADR 0563 §8)	2026-10-28 21:54:04 +01:00
jschoubben	82c54870ed	A module's trusted list of callers in the SDK, so the vault's secret-ask answers the callers its manifest names as the runtime proved them (issue 774, ADR 0563 §8)	2026-10-28 21:54:04 +01:00
jschoubben	79231a9e6c	A node's engine answers its own node's node-engine verbs, says the seat's events and asks the operator as node-engine-<node>, and no other account answers them (issue 774, ADR 0563 §1, §3, §6)	2026-10-28 21:54:04 +01:00
jschoubben	222d605f6f	The node seat node-engine: held by every node's engine, its six verbs and three events, and no module may claim it (issue 774, ADR 0563 §1)	2026-10-28 21:54:04 +01:00
jschoubben	3a8997c58a	Bundle the mesh's authorities by certificate, and check a node's certificate against every one a bundle holds (issue 774, ADR 0550 §2)	2026-10-28 21:54:04 +01:00
jschoubben	d6db3f38e6	The vault signs: the contract of its state signers, its verb sign and its event signed, a node's grants to ask it and to read what it trusts, and the authority composed as a bundle (issue 774, ADR 0550 §2)	2026-10-28 21:54:04 +01:00
jschoubben	18a47ac3c7	Placed: a module in the first revision heard of a node's key stands since before it, so the seed's placement does not leave out what already ran (issue 774)	2026-10-28 21:54:04 +01:00
jschoubben	1386219d4d	One reader of the catalogue's placement and the toolchain gate over it, in place of the three copies over the controller's assignments (issue 774, ADR 0549 §3, issue 1940); the assigner may read the lease (ADR 0549 §5)	2026-10-28 21:54:04 +01:00
jschoubben	10d4d2f845	Checker seat test: the try replaces both shell commands (issue 774)	2026-10-28 21:54:04 +01:00
jschoubben	b3100c55a1	Checker seat: the try's verb also replaces docker run postgres, as the controller's try did (ADR 0547 §10, issue 774)	2026-10-28 21:54:04 +01:00
jschoubben	0062bdc4a6	buscompose: the assigner may read the controller's lease, to choose where grants are read from (issue 774)	2026-10-28 21:54:04 +01:00
jschoubben	a1a688b19e	delivery: the grants part's grant keys and the source the assigner reads (a1; issue 774) ... Why: the grants part writes grants.<module>.<fp> in shadow beside the controller's; the assigner switches source only when the lease is handed away.	2026-10-28 21:54:04 +01:00
jschoubben	54b17164ef	Checker seat test: fold into the closed-set seats test, no new test function (issue 774)	2026-10-28 21:54:04 +01:00
jschoubben	3ed9a0e342	Checker seat: the try's end by hand is a verb too (issue 774)	2026-10-28 21:54:04 +01:00
jschoubben	9b5657a3d6	Seat mesh-delivery-checker: the try and its read are verbs of the checker's own seat, replacing sh merge-check.sh (ADR 0547 §10, issue 774)	2026-10-28 21:54:04 +01:00
jschoubben	1d4637e46b	Name the vault's verb issue-account on its seat, so its holder may serve it (issue 774, ADR 0561 §9)	2026-10-28 21:54:04 +01:00
jschoubben	fefa8b88ea	Say when the lease is handed away, let the vault and the grants part read it, and let the grants part create the consumers an account needs, so both turn on at the lease write alone (issue 774, ADR 0561 §3, §6)	2026-10-28 21:54:04 +01:00
jschoubben	8d9b3f779d	Build a minted account's value as the controller does, byte for byte, so a runtime reads the vault's unchanged (issue 774, ADR 0561 §2)	2026-10-28 21:54:04 +01:00
jschoubben	da506bb3b8	Say which bus accounts the grants part wants, in a state only the vault reads, and what the vault says when it mints one, so the vault can mint from the grants part's word (issue 774, ADR 0561 §2)	2026-10-28 21:54:04 +01:00