Take-over of the bus's user list by the grants part: sealed list layout, followed-list have, handed hashes, named readers (issue 1945) #89

Merged

mesh-tools merged 5 commits from feat/1945-user-list-switch into main 2026-10-26 12:21:40 +00:00

Conversation 5 Commits 5 Files Changed 14

+859 -13

5 Commits

Author	SHA1	Message	Date
jschoubben	c2a410bb63	The have's user list says why the bus node does not watch the grants part's key (review of the switch, issue 1945)	2026-10-26 12:25:27 +01:00
jschoubben	af66adc180	Bring in the adoption handing (fix/1945-adopt-hashes 17478994): the have's user list carries Handed beside Follows and Key; a state that names readers is not Readable to a composer that knows no readers (review of the switch, issue 1945)	2026-10-26 12:23:07 +01:00
jschoubben	83ee7769d8	Make the grants part's state in the switch's test as the part makes a declared state, by its stream (issue 1945)	2026-10-26 12:00:29 +01:00
jschoubben	175a5567b8	The bus node follows the grants part's sealed user list, and only the grants part reads the vault's hashes (ADR 0547 clauses 7, 9; issue 1945) ... The grants part writes its list as an object of its own bucket, sealed to the bus node's key, and names it in user-list.sealed; the node-engine of the node holding mesh-broker is granted that one key and an object by name, the grants part its bucket (the controller's copy carries the same grants, byte for byte, golden regenerated there). A state may name its readers (announce, NamedReaders): mesh-vault.bus-accounts is read by mesh-grants alone.	2026-10-26 11:53:11 +01:00
jschoubben	1747899419	delivery: the bus node hands the loaded list's hashes to the vault, sealed, in the bus module's have (ADR 0547 clause 9, issue 1945) ... The vault holds no value for the controller's own account, the node accounts and the enrolled devices, so it cannot hash them; the one part that has their hashes is the node-engine of the bus node, in the list the bus loaded. The have of the bus module now carries that list's hashes sealed to the vault's key (UserListWritten.Handed), which every reader of the have bucket sees as a count, a list digest and a key fingerprint, and only the vault opens. HandedAccountsOf reads them from a composed list, HandAccounts seals, OpenHanded opens and refuses a box sealed to another key.	2026-10-26 11:28:38 +01:00