jschoubben 3102fd5c1b A-165 callers: the seat server refuses a caller outside a verb's effective callers before its handler ...

conn.AnswerSeat takes the seat's definition from its caller (the seat list the process follows) and,
before a handler runs, refuses an unproven caller, and every caller while the definition is unread,
names no such verb or opens it to none; a proven caller is among them, since the grants part composes
the call subject only for the effective callers. Every caller of AnswerSeat passes the definition.

Builds: design 47 G §610; lead answers A-165, A-179, A-186

Claude-Session: https://claude.ai/code/session_01NcbgfGKaxw984XyAPfLm4h

2026-11-12 05:51:14 +01:00

..

account_test.go

G B-1 (Go): the tests G added are merged into existing ones as subtests, so mesh-sdk ends G with the tests it started with

2026-11-11 22:03:15 +01:00

account.go

process: AnswerSeat answers a seat's verbs over the bus with the proved caller

2026-11-11 23:50:15 +01:00

asks_integration_test.go

Let a process read the router's record of its module's own ask (issue 1189)

2026-10-19 04:35:33 +02:00

asks_test.go

Let a process read the router's record of its module's own ask (issue 1189)

2026-10-19 04:35:33 +02:00

asks.go

Wait out a bus that answers nothing for a few seconds instead of losing the write (issue 774)

2026-10-30 18:18:32 +01:00

buckets.go

Refuse a key-value write too large for its bucket before it is put (issue 774)

2026-10-30 18:02:18 +01:00

call_integration_test.go

A-165 callers: the seat server refuses a caller outside a verb's effective callers before its handler

2026-11-12 05:51:14 +01:00

call_test.go

A-165 callers: the seat server refuses a caller outside a verb's effective callers before its handler

2026-11-12 05:51:14 +01:00

call.go

process: AnswerSeat answers a seat's verbs over the bus with the proved caller

2026-11-11 23:50:15 +01:00

conn_integration_test.go

Give every module the announcement test, on an exported test bus (issue 1790, S11, ADR 0495 §5)

2026-10-22 17:43:07 +02:00

conn.go

process: AnswerSeat answers a seat's verbs over the bus with the proved caller

2026-11-11 23:50:15 +01:00

emit_integration_test.go

G A-10: Conn.EmitSeat says a seat's event as its holder on mesh.seat.<seat>.event.<event>

2026-11-11 21:41:56 +01:00

emit.go

G A-10: Conn.EmitSeat says a seat's event as its holder on mesh.seat.<seat>.event.<event>

2026-11-11 21:41:56 +01:00

event_hub_integration_test.go

G B-1 (Go): the tests G added are merged into existing ones as subtests, so mesh-sdk ends G with the tests it started with

2026-11-11 22:03:15 +01:00

event_hub_test.go

R-3: W1.12: one stream name

2026-11-11 10:51:07 +01:00

event_hub.go

S4: say that a handler ending a kept call's wait also calls at the consumer's bind (issue 1966, ADR 0668)

2026-11-10 02:52:19 +01:00

fixture_integration_test.go

G A-10: Conn.EmitSeat says a seat's event as its holder on mesh.seat.<seat>.event.<event>

2026-11-11 21:41:56 +01:00

follow_integration_test.go

Stop hearing mesh.assignment: a process follows its membership from the grants part's state alone

2026-11-02 00:19:15 +01:00

follow.go

Stop hearing mesh.assignment: a process follows its membership from the grants part's state alone

2026-11-02 00:19:15 +01:00

keeps_integration_test.go

Let a module's code announce the states it keeps, in Go and TypeScript (issue 1790, S10, ADR 0495 §2 §5)

2026-10-22 17:42:24 +02:00

keeps_test.go

Let a module's code announce the states it keeps, in Go and TypeScript (issue 1790, S10, ADR 0495 §2 §5)

2026-10-22 17:42:24 +02:00

keeps.go

Let a module's code announce the states it keeps, in Go and TypeScript (issue 1790, S10, ADR 0495 §2 §5)

2026-10-22 17:42:24 +02:00

log.go

Keep the builder's history as its own log that readers declare and follow, the memberships as the grants part's state, and refuse a module's own stream, so every module's data is in the bus's predefined forms and readable by its tools (issue 1955, ADR 0571 clauses 1, 4, 5, 7)

2026-10-29 23:28:21 +01:00

module.go

R-1: W1.3: a process reads its own build from MESH_FINGERPRINT once, and says it

2026-11-11 10:51:06 +01:00

no_serve_test.go

process: AnswerSeat answers a seat's verbs over the bus with the proved caller

2026-11-11 23:50:15 +01:00

ownbuild.go

R-1: W1.3: a process reads its own build from MESH_FINGERPRINT once, and says it

2026-11-11 10:51:06 +01:00

pernode_integration_test.go

process: read a state its owner keeps one bucket per node as one state, so the provisioner, the assigner and the view read every node's compositions (ADR 0593 §6)

2026-11-02 18:23:27 +01:00

pernode.go

pernode: the per-node state's rules over any connection, so the runtime and a process read compositions with one copy of them (ADR 0593 §6)

2026-11-02 18:29:40 +01:00

pin_test.go

Make the membership, its subject, stream, bare address and the pin public, so the route proxy leaves the controller's module (issue 1633)

2026-10-22 09:51:01 +02:00

queue_integration_test.go

Make the Term test prove no redelivery instead of passing on a 30s AckWait it never waits out (issue 1190, review round 1 finding 2)

2026-10-19 04:50:07 +02:00

queue_test.go

Let a process consume its module's work queue, acknowledging, delaying or terminating each message (issue 1190)

2026-10-19 04:38:45 +02:00

queue.go

Let a process consume its module's work queue, acknowledging, delaying or terminating each message (issue 1190)

2026-10-19 04:38:45 +02:00

reconnect_test.go

Reconnect without limit, as the tool runner does, so a process outlives a bus restart (issue 1192, review round 1 finding 5)

2026-10-19 04:52:10 +02:00

seatstream.go

G §641: HearSeatEvents reads a stream kept last per subject whole at its start through an ordered consumer, then follows the durable, and says waiting then read

2026-11-11 21:52:41 +01:00

serve.go

A-165 callers: the seat server refuses a caller outside a verb's effective callers before its handler

2026-11-12 05:51:14 +01:00

state_integration_test.go

Carry each contribution, composed, and the consumer's address in its plan entry, and let a process read another module's state, so route-proxy serves routes from the seat's plans alone (issue 774, research 072 row 34)

2026-10-31 09:27:26 +01:00

state_test.go

ADR 0627 §4: asks and asker leave mesh-sdk for operator-channel's client; the channel's benches stay as package channel

2026-11-04 13:27:00 +01:00

state.go

ADR 0627 §4: asks and asker leave mesh-sdk for operator-channel's client; the channel's benches stay as package channel

2026-11-04 13:27:00 +01:00