jschoubben 2d95c0eb59 AM-D3 path: the tool runner states its own fingerprint beside its capabilities ...

A capability reading must be tied to the runner that made it, so the grants
part can tell an older runner's reading from the running one's.

Builds: design 46 7 §6 (the announcement carries the runner's fingerprint), lead answer A-203 (key `fingerprint`)

Claude-Session: https://claude.ai/code/session_01NcbgfGKaxw984XyAPfLm4h

2026-11-12 06:02:18 +01:00

..

announce_test.go

AM-D3 path: the tool runner states its own fingerprint beside its capabilities

2026-11-12 06:02:18 +01:00

busstate.go

A-6 the capability: the tool runner states approval-mark/1 in its announcement

2026-11-12 05:15:43 +01:00

caller_test.go

A-165 callers: the tool runner refuses a seat verb's caller outside its effective callers before the bundle

2026-11-12 05:49:57 +01:00

events_test.go

One guarded handler slot for a bundle's event and heartbeat handlers, so a reload never races the consumer's loop

2026-11-04 16:28:08 +01:00

gate.go

A-165 callers: the tool runner refuses a seat verb's caller outside its effective callers before the bundle

2026-11-12 05:49:57 +01:00

ledger_credentials_test.go

Tool runner: the grants part's membership bucket and key are membership's, which the SDK keeps (ADR 0635 §4; issue 1966)

2026-11-05 15:36:18 +01:00

ledger_credentials.go

Leave the own secret ledgers out of node-tools' manifest until the vault holds it on every machine, reading a missing file as no ledger credentials; grant the test's ledger account as the grants part does (issue 1966 T6)

2026-11-03 15:29:47 +01:00

ledger_integration_test.go

Append and snapshot a ledger on mesh-sdk's ledger subjects, the ones its account is granted, refusing a binding naming others (issue 1966 T6)

2026-11-03 15:17:12 +01:00

ledgers_test.go

Test budget: the approval mark's two tables replace two tests folded into their neighbours

2026-11-12 05:26:24 +01:00

ledgers.go

TLS-1, TLS-2, TLS-3: the runner declares its own secret ledgers, refuses a bundle tool named as a ledger repair, and states the capabilities of its calls in its PING (issue 1966)

2026-11-04 11:40:03 +01:00

log_test.go

Read memberships from the grants part's state, what the mesh holds from the indexer and placement, and give bundles newest, since and watch on logs, so the tool runner asks the controller for nothing it keeps (issue 1955, ADR 0571 clauses 1, 4, 5, 7)

2026-10-29 23:42:43 +01:00

own_account_test.go

Serve a module from a runtime on its own account instead of switching users, keep bus words from bundles, and never give up a channel's work (hq ADR 0259 revision)

2026-10-09 10:12:39 +02:00

provision_test.go

Feature 57 (config and provisioning): release mesh-tools (the provider's StateBus, the SDK pin, templates), reviewed

2026-10-16 09:41:17 +00:00

provision.go

Serve a tools bundle as soon as it is in place, changed or gone, with no restart; say why a bundle cannot start (issue 1945)

2026-10-25 15:09:49 +01:00

reload_test.go

One guarded handler slot for a bundle's event and heartbeat handlers, so a reload never races the consumer's loop

2026-11-04 16:28:08 +01:00

runtime_test.go

Serve a tools bundle as soon as it is in place, changed or gone, with no restart; say why a bundle cannot start (issue 1945)

2026-10-25 15:09:49 +01:00

runtime.go

AM-D3 path: the tool runner states its own fingerprint beside its capabilities

2026-11-12 06:02:18 +01:00

seat_traffic_test.go

T1: the seat settle applies a delayed nak with the bus's own delay (ADR 0664 §1, issue 1748)

2026-11-09 22:53:21 +01:00

sessions_test.go

G sessions: the runner serves a bundle's put and get sessions and states put-sessions

2026-11-11 22:39:04 +01:00

sessions.go

G sessions: the runner answers mesh/capabilities and drops a bundle's sessions when its channel closes

2026-11-11 22:41:24 +01:00

state_counter_test.go

Answer mesh/state.info with a bucket's fill and caps, so a bundle's tools can say how full its state is (issue 1952)

2026-10-29 22:43:58 +01:00

state_history_test.go

A page reads the bucket bound once and stops at its time budget, one value at least; an unknown verb is told by its code (issue 1966)

2026-11-09 09:00:20 +01:00

state_test.go

Issue a key-value entry asked in requires as a state, by its local name

2026-11-09 12:39:04 +01:00

watch.go

The credential wait's test stays under a second, and a failed watch says the re-read, not a restart (issue 1496)

2026-10-26 22:18:12 +01:00