jschoubben e7e20e3d13 A-165 callers: the tool runner refuses a seat verb's caller outside its effective callers before the bundle ...

Where serveSeats answers a seat's verb it reads the verb from the runner's seat list (seatdef's
EffectiveCallers): an unproven caller is refused, and every caller while the seat's definition is unread,
names no such verb or opens it to none; a proven caller is among them, since the grants part composes the
call subject only for the effective callers. A module's tool on the subject naming no caller is unchanged.

Builds: design 47 G §610; lead answers A-165, A-179

Claude-Session: https://claude.ai/code/session_01NcbgfGKaxw984XyAPfLm4h

2026-11-12 05:49:57 +01:00

..

announce_test.go

Test budget: the approval mark's two tables replace two tests folded into their neighbours

2026-11-12 05:26:24 +01:00

busstate.go

A-6 the capability: the tool runner states approval-mark/1 in its announcement

2026-11-12 05:15:43 +01:00

caller_test.go

A-165 callers: the tool runner refuses a seat verb's caller outside its effective callers before the bundle

2026-11-12 05:49:57 +01:00

events_test.go

One guarded handler slot for a bundle's event and heartbeat handlers, so a reload never races the consumer's loop

2026-11-04 16:28:08 +01:00

gate.go

A-165 callers: the tool runner refuses a seat verb's caller outside its effective callers before the bundle

2026-11-12 05:49:57 +01:00

ledger_credentials_test.go

Tool runner: the grants part's membership bucket and key are membership's, which the SDK keeps (ADR 0635 §4; issue 1966)

2026-11-05 15:36:18 +01:00

ledger_credentials.go

Leave the own secret ledgers out of node-tools' manifest until the vault holds it on every machine, reading a missing file as no ledger credentials; grant the test's ledger account as the grants part does (issue 1966 T6)

2026-11-03 15:29:47 +01:00

ledger_integration_test.go

Append and snapshot a ledger on mesh-sdk's ledger subjects, the ones its account is granted, refusing a binding naming others (issue 1966 T6)

2026-11-03 15:17:12 +01:00

ledgers_test.go

Test budget: the approval mark's two tables replace two tests folded into their neighbours

2026-11-12 05:26:24 +01:00

ledgers.go

TLS-1, TLS-2, TLS-3: the runner declares its own secret ledgers, refuses a bundle tool named as a ledger repair, and states the capabilities of its calls in its PING (issue 1966)

2026-11-04 11:40:03 +01:00

log_test.go

Read memberships from the grants part's state, what the mesh holds from the indexer and placement, and give bundles newest, since and watch on logs, so the tool runner asks the controller for nothing it keeps (issue 1955, ADR 0571 clauses 1, 4, 5, 7)

2026-10-29 23:42:43 +01:00

own_account_test.go

Serve a module from a runtime on its own account instead of switching users, keep bus words from bundles, and never give up a channel's work (hq ADR 0259 revision)

2026-10-09 10:12:39 +02:00

provision_test.go

Feature 57 (config and provisioning): release mesh-tools (the provider's StateBus, the SDK pin, templates), reviewed

2026-10-16 09:41:17 +00:00

provision.go

Serve a tools bundle as soon as it is in place, changed or gone, with no restart; say why a bundle cannot start (issue 1945)

2026-10-25 15:09:49 +01:00

reload_test.go

One guarded handler slot for a bundle's event and heartbeat handlers, so a reload never races the consumer's loop

2026-11-04 16:28:08 +01:00

runtime_test.go

Serve a tools bundle as soon as it is in place, changed or gone, with no restart; say why a bundle cannot start (issue 1945)

2026-10-25 15:09:49 +01:00

runtime.go

A-165 callers: the tool runner refuses a seat verb's caller outside its effective callers before the bundle

2026-11-12 05:49:57 +01:00

seat_traffic_test.go

T1: the seat settle applies a delayed nak with the bus's own delay (ADR 0664 §1, issue 1748)

2026-11-09 22:53:21 +01:00

sessions_test.go

G sessions: the runner serves a bundle's put and get sessions and states put-sessions

2026-11-11 22:39:04 +01:00

sessions.go

G sessions: the runner answers mesh/capabilities and drops a bundle's sessions when its channel closes

2026-11-11 22:41:24 +01:00

state_counter_test.go

Answer mesh/state.info with a bucket's fill and caps, so a bundle's tools can say how full its state is (issue 1952)

2026-10-29 22:43:58 +01:00

state_history_test.go

A page reads the bucket bound once and stops at its time budget, one value at least; an unknown verb is told by its code (issue 1966)

2026-11-09 09:00:20 +01:00

state_test.go

Issue a key-value entry asked in requires as a state, by its local name

2026-11-09 12:39:04 +01:00

watch.go

The credential wait's test stays under a second, and a failed watch says the re-read, not a restart (issue 1496)

2026-10-26 22:18:12 +01:00