A snapshot: read at commit 707a04c7ce8 on 2026-10-18T00:06:01Z by majordomus 0.29.0. Nothing on this page is read again. See it live
runtime-trust
A runtime is safe to reach from another machine, and joining the mesh trusts nobody by accident
9issuesdevtask.milestone
3readydevtask.milestone
1blockeddevtask.milestone
0activedevtask.milestone
5completedevtask.milestone
The milestone
devtask.milestone- Title
- A runtime is safe to reach from another machine, and joining the mesh trusts nobody by accident
- Outcome
- Discovery is not trust, trust is not authorization, and a caller is admitted to change anything only by a key the trust policy names. A host that can reach a runtime reads it and changes nothing it cannot authenticate; every event in the journal was checked against the trust policy that holds now, whether it arrived over a link or from disk; and the limits the documents state are the limits the code enforces.
- Status
- ACTIVE
- Rank
0- Depends on
- none
- Waiting on
- none
- Holds back
- none
- Record
.ai/repo/project/milestones/runtime-trust.yaml- Its issues
- Every issue of this milestone
Where the work is
- Ready
- Blocked
- Waiting
- —
- Active
- —
- In review
- —
- Completion blocked
- —
- Complete
- Cancelled
- —
What holds the most back
What may run at the same time
Every issue
| Readiness | Status | Issue | Title | Wave | Priority | Waiting on | Holds back |
|---|---|---|---|---|---|---|---|
| complete | DONE | I2123 | A caller beyond loopback reads, and changes nothing it cannot authenticate | 0 | p0 | — | 0 |
| complete | DONE | I2124 | An event reloaded from disk meets the trust policy in force, and no stamp outruns the clock | 0 | p0 | — | 0 |
| ready | READY | I2132 | A hello names the runtime it is meant for, and no other runtime accepts it | 0 | p1 | — | 1 |
| complete | DONE | I2133 | Every mesh input and answer has a bound, and a refused registration learns nothing | 0 | p1 | — | 1 |
| complete | DONE | I2134 | A key removed from the trust list loses its links without a restart, and a node key can be rotated | 0 | p0 | — | 1 |
| complete | DONE | I2135 | The trust root is read from the default branch, not from whatever the checkout holds | 0 | p0 | — | 0 |
| blocked | BLOCKED | I2703 | The mesh cooperation rule lists the hello checks in the order the code runs them, and a test names that order | 1 | p1 | 0 | |
| ready | READY | I2704 | A dialer reads no reply beyond the link bound and no more candidates than the bound, and a refusing peer is retried at a measured, jittered rate | 1 | p1 | — | 0 |
| ready | READY | I2705 | A node key can be rotated, peers follow the new key, and the old key is refused | 1 | p0 | — | 0 |
Findings
| Level | Code | Message | Reproduce |
|---|---|---|---|
| WARN | scope_conflict | I2132: shares docs/MESH.md with I2140; they may not run concurrently | majordomus plan validate |
| WARN | scope_conflict | I2132: shares apps/majordomus-cli/src/mesh/link.rs with I2410; they may not run concurrently | majordomus plan validate |
| WARN | scope_conflict | I2132: shares docs/MESH.md with I2411; they may not run concurrently | majordomus plan validate |
| WARN | scope_conflict | I2132: shares docs/MESH.md with I2412; they may not run concurrently | majordomus plan validate |
| WARN | scope_conflict | I2132: shares docs/MESH.md with I2413; they may not run concurrently | majordomus plan validate |
| WARN | scope_conflict | I2132: shares apps/majordomus-cli/tests/mesh_cooperation.rs with I2414; they may not run concurrently | majordomus plan validate |
| WARN | scope_conflict | I2132: shares apps/majordomus-cli/src/mesh/cooperation.rs with I2415; they may not run concurrently | majordomus plan validate |
| WARN | scope_conflict | I2132: shares apps/majordomus-cli/src/mesh/link.rs with I2723; they may not run concurrently | majordomus plan validate |
| WARN | scope_conflict | I2704: shares apps/majordomus-cli/src/mesh/cooperation.rs with I2705; they may not run concurrently | majordomus plan validate |
| WARN | scope_conflict | I2704: shares docs/MESH.md with I2706; they may not run concurrently | majordomus plan validate |
| WARN | scope_conflict | I2704: shares apps/majordomus-cli/src/mesh/cooperation.rs with I2708; they may not run concurrently | majordomus plan validate |
| WARN | scope_conflict | I2704: shares apps/majordomus-cli/src/mesh/link.rs with I2709; they may not run concurrently | majordomus plan validate |
| WARN | scope_conflict | I2705: shares apps/majordomus-cli/src/mesh/journal.rs with I2706; they may not run concurrently | majordomus plan validate |
| WARN | scope_conflict | I2705: shares apps/majordomus-cli/src/mesh/cooperation.rs with I2708; they may not run concurrently | majordomus plan validate |
| WARN | scope_conflict | I2705: shares apps/majordomus-cli/src/mesh/identity.rs with I2709; they may not run concurrently | majordomus plan validate |