From 052c46ab2502237896282349bbd44c8cce1583d4 Mon Sep 17 00:00:00 2001 From: atlas Date: Sun, 1 Nov 2026 18:49:55 +0100 Subject: [PATCH] fix prose lint in the permissions docs; lock the serde dependency of swarm-agent-verify --- Cargo.lock | 1 + docs/process/conventions.md | 4 ++-- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index d24d8d0e..48eae4fa 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -4819,6 +4819,7 @@ name = "swarm-agent-verify" version = "0.1.0" dependencies = [ "anyhow", + "serde", "subtle", "swarm-secret-client", "thiserror 2.0.18", diff --git a/docs/process/conventions.md b/docs/process/conventions.md index b4ed176e..2a4f7afb 100644 --- a/docs/process/conventions.md +++ b/docs/process/conventions.md @@ -322,8 +322,8 @@ without it gets a 403 from the store's gateway when `swarm-logs` or An agent decodes its own record, in its harness (`hive-agent/src/swarm_permissions.rs`, through `swarm_queue_client::agent_permissions::read`), -and a build that doesn't know a name would drop to no permissions. So -swarm-controller refuses a change that adds `logs` or `metrics` to an existing +and a build that doesn't know a name would drop to no permissions. The controller +therefore refuses a change that adds `logs` or `metrics` to an existing agent, with a 409, unless both the agent's hive (`tolerant-permissions` in its status snapshot) and its running harness (the same entry in its turn-state header, `swarm_wire::hive_status`) advertise it. A harness not yet updated, a