jschoubben 0fdec2bd60 A-6 the capability: the tool runner states approval-mark/1 in its announcement ...

Its gate sits on every handler it serves, so it says it honours the mark, and the
grants part, reading its node's readings, composes no deny of its modules' marked subjects.

Builds: design 46 7-approval-mark §6

Claude-Session: https://claude.ai/code/session_01NcbgfGKaxw984XyAPfLm4h

2026-11-12 05:15:43 +01:00

..

announce_test.go

A-6 the capability: the tool runner states approval-mark/1 in its announcement

2026-11-12 05:15:43 +01:00

busstate.go

A-6 the capability: the tool runner states approval-mark/1 in its announcement

2026-11-12 05:15:43 +01:00

caller_test.go

Stamp a ledger operation with the caller the runner proved for the call in flight it names, refusing another module's call or one not in flight; serve the ledger calls on the pipe (issue 1966 T5)

2026-11-03 13:49:15 +01:00

events_test.go

One guarded handler slot for a bundle's event and heartbeat handlers, so a reload never races the consumer's loop

2026-11-04 16:28:08 +01:00

gate.go

A-3 judge and claim: the same call again runs once on the router's record of its Approve

2026-11-12 05:13:18 +01:00

ledger_credentials_test.go

Tool runner: the grants part's membership bucket and key are membership's, which the SDK keeps (ADR 0635 §4; issue 1966)

2026-11-05 15:36:18 +01:00

ledger_credentials.go

Leave the own secret ledgers out of node-tools' manifest until the vault holds it on every machine, reading a missing file as no ledger credentials; grant the test's ledger account as the grants part does (issue 1966 T6)

2026-11-03 15:29:47 +01:00

ledger_integration_test.go

Append and snapshot a ledger on mesh-sdk's ledger subjects, the ones its account is granted, refusing a binding naming others (issue 1966 T6)

2026-11-03 15:17:12 +01:00

ledgers_test.go

A-6 the capability: the tool runner states approval-mark/1 in its announcement

2026-11-12 05:15:43 +01:00

ledgers.go

TLS-1, TLS-2, TLS-3: the runner declares its own secret ledgers, refuses a bundle tool named as a ledger repair, and states the capabilities of its calls in its PING (issue 1966)

2026-11-04 11:40:03 +01:00

log_test.go

Read memberships from the grants part's state, what the mesh holds from the indexer and placement, and give bundles newest, since and watch on logs, so the tool runner asks the controller for nothing it keeps (issue 1955, ADR 0571 clauses 1, 4, 5, 7)

2026-10-29 23:42:43 +01:00

own_account_test.go

Serve a module from a runtime on its own account instead of switching users, keep bus words from bundles, and never give up a channel's work (hq ADR 0259 revision)

2026-10-09 10:12:39 +02:00

provision_test.go

Feature 57 (config and provisioning): release mesh-tools (the provider's StateBus, the SDK pin, templates), reviewed

2026-10-16 09:41:17 +00:00

provision.go

Serve a tools bundle as soon as it is in place, changed or gone, with no restart; say why a bundle cannot start (issue 1945)

2026-10-25 15:09:49 +01:00

reload_test.go

One guarded handler slot for a bundle's event and heartbeat handlers, so a reload never races the consumer's loop

2026-11-04 16:28:08 +01:00

runtime_test.go

Serve a tools bundle as soon as it is in place, changed or gone, with no restart; say why a bundle cannot start (issue 1945)

2026-10-25 15:09:49 +01:00

runtime.go

A-3 judge and claim: the same call again runs once on the router's record of its Approve

2026-11-12 05:13:18 +01:00

seat_traffic_test.go

T1: the seat settle applies a delayed nak with the bus's own delay (ADR 0664 §1, issue 1748)

2026-11-09 22:53:21 +01:00

sessions_test.go

G sessions: the runner serves a bundle's put and get sessions and states put-sessions

2026-11-11 22:39:04 +01:00

sessions.go

G sessions: the runner answers mesh/capabilities and drops a bundle's sessions when its channel closes

2026-11-11 22:41:24 +01:00

state_counter_test.go

Answer mesh/state.info with a bucket's fill and caps, so a bundle's tools can say how full its state is (issue 1952)

2026-10-29 22:43:58 +01:00

state_history_test.go

A page reads the bucket bound once and stops at its time budget, one value at least; an unknown verb is told by its code (issue 1966)

2026-11-09 09:00:20 +01:00

state_test.go

Issue a key-value entry asked in requires as a state, by its local name

2026-11-09 12:39:04 +01:00

watch.go

The credential wait's test stays under a second, and a failed watch says the re-read, not a restart (issue 1496)

2026-10-26 22:18:12 +01:00