jschoubben 9169830210 Grant an enrolling node's user the seat's redeem alone, so from the lease write no token reaches the controller ...

ADR 0587 §4: the grants part composes enrol.<node> granted only to call mesh-enrolment.redeem and to hear its own
inbox; §6: from the lease write the controller's enrolment subject is not served. The enrolment principal now calls
redeem in its own name while the seat's holder serves it, and keeps mesh.control.enrol only until Records says the
lease is handed away (a field the grants part sets and the controller's composer never does). A user left able to
enrol nowhere is refused by name rather than composed empty. Golden lists unchanged. Tested as a subtest of
TestTheCopiedComposerComposesAsTheControllers, no new test function.

(issue 774, 774/S40)

Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

2026-11-02 01:41:03 +01:00

..

testdata

Build a minted account's value as the controller does, byte for byte, so a runtime reads the vault's unchanged (issue 774, ADR 0561 §2)

2026-10-28 21:54:04 +01:00

accounts.go

Let the lease key name its ask and time, and the user-list key say the lease is handed

2026-11-02 00:15:20 +01:00

agreement.go

Copy the controller's bus composer into mesh-sdk as buscompose, held byte for byte to the controller's lists (issue 1377, ADR 0547 §5)

2026-10-25 21:54:58 +01:00

announced.go

Judge every read for its reader where the bus's users are composed (issue 774)

2026-10-30 18:08:02 +01:00

buildbacklog.go

Copy the controller's bus composer into mesh-sdk as buscompose, held byte for byte to the controller's lists (issue 1377, ADR 0547 §5)

2026-10-25 21:54:58 +01:00

buscompose_test.go

Grant an enrolling node's user the seat's redeem alone, so from the lease write no token reaches the controller

2026-11-02 01:41:03 +01:00

callers.go

Copy the controller's bus composer into mesh-sdk as buscompose, held byte for byte to the controller's lists (issue 1377, ADR 0547 §5)

2026-10-25 21:54:58 +01:00

cancelled.go

Copy the controller's bus composer into mesh-sdk as buscompose, held byte for byte to the controller's lists (issue 1377, ADR 0547 §5)

2026-10-25 21:54:58 +01:00

composed.go

Copy the controller's bus composer into mesh-sdk as buscompose, held byte for byte to the controller's lists (issue 1377, ADR 0547 §5)

2026-10-25 21:54:58 +01:00

controller_buckets.go

Copy the controller's bus composer into mesh-sdk as buscompose, held byte for byte to the controller's lists (issue 1377, ADR 0547 §5)

2026-10-25 21:54:58 +01:00

create_test.go

Say how a declared bucket and module stream are created, so the grants part makes the same stream the controller does

2026-10-26 09:04:43 +01:00

create.go

Say when the lease is handed away, let the vault and the grants part read it, and let the grants part create the consumers an account needs, so both turn on at the lease write alone (issue 774, ADR 0561 §3, §6)

2026-10-28 21:54:04 +01:00

creates_streams_test.go

Stop declaring and reading the ASSIGNMENTS stream: a runtime reads its membership from the grants part's state, and the stream is deleted at the lease write and must not be made again (issue 774, research 072 row 33)

2026-10-31 09:21:04 +01:00

declaration_files.go

Copy the controller's bus composer into mesh-sdk as buscompose, held byte for byte to the controller's lists (issue 1377, ADR 0547 §5)

2026-10-25 21:54:58 +01:00

derived.go

Say when the lease is handed away, let the vault and the grants part read it, and let the grants part create the consumers an account needs, so both turn on at the lease write alone (issue 774, ADR 0561 §3, §6)

2026-10-28 21:54:04 +01:00

doc.go

Let the grants part create the streams manifests declare, so a new module state no longer waits for a controller start

2026-10-26 09:01:32 +01:00

engine.go

Work out a node's declared packages and their difference with the mirror in the SDK, so each engine writes its own key (ADR 0565 clause 6, issue 1953)

2026-11-01 16:02:06 +01:00

fixtures_test.go

Let the grants part create the streams manifests declare, so a new module state no longer waits for a controller start

2026-10-26 09:01:32 +01:00

health_grants.go

The watchman hears the lease write's events and the stream ASSIGNMENTS deleted

2026-11-02 00:37:04 +01:00

lease_cut.go

Compose the lease write's cut, so a controller started after the write fails on the lease

2026-11-02 00:14:44 +01:00

log.go

Keep the builder's history as its own log that readers declare and follow, the memberships as the grants part's state, and refuse a module's own stream, so every module's data is in the bus's predefined forms and readable by its tools (issue 1955, ADR 0571 clauses 1, 4, 5, 7)

2026-10-29 23:28:21 +01:00

membership.go

Keep the builder's history as its own log that readers declare and follow, the memberships as the grants part's state, and refuse a module's own stream, so every module's data is in the bus's predefined forms and readable by its tools (issue 1955, ADR 0571 clauses 1, 4, 5, 7)

2026-10-29 23:28:21 +01:00

modstreams.go

Let the tree readers decode, give the judge the manifest's data it reads, and stop judging outside the catalogue (ADR 0578 §3, §4)

2026-11-01 02:33:19 +01:00

nats.go

Grant an enrolling node's user the seat's redeem alone, so from the lease write no token reaches the controller

2026-11-02 01:41:03 +01:00

onnats.go

Copy the controller's bus composer into mesh-sdk as buscompose, held byte for byte to the controller's lists (issue 1377, ADR 0547 §5)

2026-10-25 21:54:58 +01:00

process_grants.go

process: a bucket missing at a part's start is bound when the bus says it was created, keeping what was written meanwhile; buscompose grants each principal the creation of the buckets it may bind (issue 1790)

2026-10-26 15:11:00 +01:00

provisioner.go

Grant the provisioner client every machine's plans, as it watches them, so g14 and shanks read their plans again (issue 774)

2026-10-30 16:40:46 +01:00

raise.go

Copy the controller's bus composer into mesh-sdk as buscompose, held byte for byte to the controller's lists (issue 1377, ADR 0547 §5)

2026-10-25 21:54:58 +01:00

readiness.go

Copy the controller's bus composer into mesh-sdk as buscompose, held byte for byte to the controller's lists (issue 1377, ADR 0547 §5)

2026-10-25 21:54:58 +01:00

sdk_membership.go

Copy the controller's bus composer into mesh-sdk as buscompose, held byte for byte to the controller's lists (issue 1377, ADR 0547 §5)

2026-10-25 21:54:58 +01:00

seattraffic.go

Let observers' findings and a carried holder's seat events reach the bus (issue 1952)

2026-10-31 21:30:31 +01:00

state.go

Name the node-engine's data items state, so mesh-host writes and disk-load reads one shape (ADR 0577)

2026-11-01 00:05:38 +01:00

streams.go

Stop declaring and reading the ASSIGNMENTS stream: a runtime reads its membership from the grants part's state, and the stream is deleted at the lease write and must not be made again (issue 774, research 072 row 33)

2026-10-31 09:21:04 +01:00

userlist_switch_integration_test.go

Make the grants part's state in the switch's test as the part makes a declared state, by its stream (issue 1945)

2026-10-26 12:00:29 +01:00

userlist_switch.go

Compose a node's two logins from the vault's node-logins, so a rotation can switch with both loaded

2026-11-02 01:41:03 +01:00

users.go

Grant an enrolling node's user the seat's redeem alone, so from the lease write no token reaches the controller

2026-11-02 01:41:03 +01:00

waits.go

Copy the controller's bus composer into mesh-sdk as buscompose, held byte for byte to the controller's lists (issue 1377, ADR 0547 §5)

2026-10-25 21:54:58 +01:00

writers.go

Compose the lease write's cut, so a controller started after the write fails on the lease

2026-11-02 00:14:44 +01:00