jschoubben 362dddae40 Compose mesh-enrolment's grants: its bucket written by it alone, the vault's enrolment verbs called by it alone ...

ADR 0587 §1-§3 (changing ADR 0561 §5) make mesh-enrolment the only caller of the vault's enrolment-token and
node-account and a caller of sign, and §2 its bucket enrolments read by it and by the grants part as a named reader.
The holder calls the vault through its manifest's invokes, in its own name, as any caller does; while the vault serves
either enrolment verb every other principal is denied both, however wide its grant (a runtime's or an agent's `*`),
as ControllerOnly denies the desk's prompt. The writers table gains the open enrolments (mesh-enrolment) and the
node-logins (the vault), each one writer; NamedReaders names the grants part for enrolments. Golden lists unchanged.
Tested as a subtest of TestTheCopiedComposerComposesAsTheControllers, no new test function.

(issue 774, 774/S41)

Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL

2026-11-02 01:41:03 +01:00

..

testdata

Build a minted account's value as the controller does, byte for byte, so a runtime reads the vault's unchanged (issue 774, ADR 0561 §2)

2026-10-28 21:54:04 +01:00

accounts.go

Let the lease key name its ask and time, and the user-list key say the lease is handed

2026-11-02 00:15:20 +01:00

agreement.go

Copy the controller's bus composer into mesh-sdk as buscompose, held byte for byte to the controller's lists (issue 1377, ADR 0547 §5)

2026-10-25 21:54:58 +01:00

announced.go

Judge every read for its reader where the bus's users are composed (issue 774)

2026-10-30 18:08:02 +01:00

buildbacklog.go

Copy the controller's bus composer into mesh-sdk as buscompose, held byte for byte to the controller's lists (issue 1377, ADR 0547 §5)

2026-10-25 21:54:58 +01:00

buscompose_test.go

Compose mesh-enrolment's grants: its bucket written by it alone, the vault's enrolment verbs called by it alone

2026-11-02 01:41:03 +01:00

callers.go

Copy the controller's bus composer into mesh-sdk as buscompose, held byte for byte to the controller's lists (issue 1377, ADR 0547 §5)

2026-10-25 21:54:58 +01:00

cancelled.go

Copy the controller's bus composer into mesh-sdk as buscompose, held byte for byte to the controller's lists (issue 1377, ADR 0547 §5)

2026-10-25 21:54:58 +01:00

composed.go

Copy the controller's bus composer into mesh-sdk as buscompose, held byte for byte to the controller's lists (issue 1377, ADR 0547 §5)

2026-10-25 21:54:58 +01:00

controller_buckets.go

Copy the controller's bus composer into mesh-sdk as buscompose, held byte for byte to the controller's lists (issue 1377, ADR 0547 §5)

2026-10-25 21:54:58 +01:00

create_test.go

Say how a declared bucket and module stream are created, so the grants part makes the same stream the controller does

2026-10-26 09:04:43 +01:00

create.go

Say when the lease is handed away, let the vault and the grants part read it, and let the grants part create the consumers an account needs, so both turn on at the lease write alone (issue 774, ADR 0561 §3, §6)

2026-10-28 21:54:04 +01:00

creates_streams_test.go

Stop declaring and reading the ASSIGNMENTS stream: a runtime reads its membership from the grants part's state, and the stream is deleted at the lease write and must not be made again (issue 774, research 072 row 33)

2026-10-31 09:21:04 +01:00

declaration_files.go

Copy the controller's bus composer into mesh-sdk as buscompose, held byte for byte to the controller's lists (issue 1377, ADR 0547 §5)

2026-10-25 21:54:58 +01:00

derived.go

Say when the lease is handed away, let the vault and the grants part read it, and let the grants part create the consumers an account needs, so both turn on at the lease write alone (issue 774, ADR 0561 §3, §6)

2026-10-28 21:54:04 +01:00

doc.go

Let the grants part create the streams manifests declare, so a new module state no longer waits for a controller start

2026-10-26 09:01:32 +01:00

engine.go

Work out a node's declared packages and their difference with the mirror in the SDK, so each engine writes its own key (ADR 0565 clause 6, issue 1953)

2026-11-01 16:02:06 +01:00

fixtures_test.go

Let the grants part create the streams manifests declare, so a new module state no longer waits for a controller start

2026-10-26 09:01:32 +01:00

health_grants.go

The watchman hears the lease write's events and the stream ASSIGNMENTS deleted

2026-11-02 00:37:04 +01:00

lease_cut.go

Compose the lease write's cut, so a controller started after the write fails on the lease

2026-11-02 00:14:44 +01:00

log.go

Keep the builder's history as its own log that readers declare and follow, the memberships as the grants part's state, and refuse a module's own stream, so every module's data is in the bus's predefined forms and readable by its tools (issue 1955, ADR 0571 clauses 1, 4, 5, 7)

2026-10-29 23:28:21 +01:00

membership.go

Keep the builder's history as its own log that readers declare and follow, the memberships as the grants part's state, and refuse a module's own stream, so every module's data is in the bus's predefined forms and readable by its tools (issue 1955, ADR 0571 clauses 1, 4, 5, 7)

2026-10-29 23:28:21 +01:00

modstreams.go

Let the tree readers decode, give the judge the manifest's data it reads, and stop judging outside the catalogue (ADR 0578 §3, §4)

2026-11-01 02:33:19 +01:00

nats.go

Compose mesh-enrolment's grants: its bucket written by it alone, the vault's enrolment verbs called by it alone

2026-11-02 01:41:03 +01:00

onnats.go

Copy the controller's bus composer into mesh-sdk as buscompose, held byte for byte to the controller's lists (issue 1377, ADR 0547 §5)

2026-10-25 21:54:58 +01:00

process_grants.go

process: a bucket missing at a part's start is bound when the bus says it was created, keeping what was written meanwhile; buscompose grants each principal the creation of the buckets it may bind (issue 1790)

2026-10-26 15:11:00 +01:00

provisioner.go

Grant the provisioner client every machine's plans, as it watches them, so g14 and shanks read their plans again (issue 774)

2026-10-30 16:40:46 +01:00

raise.go

Copy the controller's bus composer into mesh-sdk as buscompose, held byte for byte to the controller's lists (issue 1377, ADR 0547 §5)

2026-10-25 21:54:58 +01:00

readiness.go

Copy the controller's bus composer into mesh-sdk as buscompose, held byte for byte to the controller's lists (issue 1377, ADR 0547 §5)

2026-10-25 21:54:58 +01:00

sdk_membership.go

Copy the controller's bus composer into mesh-sdk as buscompose, held byte for byte to the controller's lists (issue 1377, ADR 0547 §5)

2026-10-25 21:54:58 +01:00

seattraffic.go

Let observers' findings and a carried holder's seat events reach the bus (issue 1952)

2026-10-31 21:30:31 +01:00

state.go

Name the node-engine's data items state, so mesh-host writes and disk-load reads one shape (ADR 0577)

2026-11-01 00:05:38 +01:00

streams.go

Stop declaring and reading the ASSIGNMENTS stream: a runtime reads its membership from the grants part's state, and the stream is deleted at the lease write and must not be made again (issue 774, research 072 row 33)

2026-10-31 09:21:04 +01:00

userlist_switch_integration_test.go

Make the grants part's state in the switch's test as the part makes a declared state, by its stream (issue 1945)

2026-10-26 12:00:29 +01:00

userlist_switch.go

Compose mesh-enrolment's grants: its bucket written by it alone, the vault's enrolment verbs called by it alone

2026-11-02 01:41:03 +01:00

users.go

Compose mesh-enrolment's grants: its bucket written by it alone, the vault's enrolment verbs called by it alone

2026-11-02 01:41:03 +01:00

waits.go

Copy the controller's bus composer into mesh-sdk as buscompose, held byte for byte to the controller's lists (issue 1377, ADR 0547 §5)

2026-10-25 21:54:58 +01:00

writers.go

Compose mesh-enrolment's grants: its bucket written by it alone, the vault's enrolment verbs called by it alone

2026-11-02 01:41:03 +01:00