atlas
66ac034949
swarm-bao: grant the queue responder the callout issuer and user keys' leaves ...
The `swarm-nats-auth` policy grants create and read, never update, on the
seed and public half of the callout issuer and user keys, beside the xkey's
two leaves: `ensure-callout-keys` creates them under that role, and the
responder reads both seeds as it starts.
The `swarm-secret-publisher` policy, which may write the rest of
`swarm/services/`, is denied both seed paths exactly, as it is the xkey's.
A planted issuer seed would be the authority to admit anyone to the queue.
Both policies are written by the granter on every deploy; nothing about the
granter's own policy changes.
2026-10-06 14:53:33 +02:00
agents: work/ in the disk-metric docs, holder never sees work/, chown guard comment
2026-10-05 13:23:39 +02:00
nix: move the in-container modules to nix/container-modules/
2026-09-29 19:51:46 +02:00
nix: finish the "moved to" comment sweep
2026-10-05 09:59:02 +02:00
swarm-bao: grant the queue responder the callout issuer and user keys' leaves
2026-10-06 14:53:33 +02:00
swarm-bao: grant the queue responder the callout issuer and user keys' leaves
2026-10-06 14:53:33 +02:00
nix: comments state current behaviour, not history
2026-10-05 09:58:50 +02:00
swarm-nats: test that the server's rendered config carries the callout xkey
2026-10-05 23:25:36 +02:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
swarm-nats: test that the server's rendered config carries the callout xkey
2026-10-05 23:25:36 +02:00
Add shellcheck to devshell
2026-09-15 21:45:58 +02:00
otel: map journald PRIORITY onto a severity at every journald receiver
2026-09-20 14:23:56 +02:00
swarm: extract the name guards, so the module just says what is forbidden
2026-08-31 18:50:15 +02:00
nix: comments state current behaviour, not history
2026-10-05 09:58:50 +02:00
docs(rust): the dep-cache comment no longer describes two consumers
2026-08-11 22:29:56 +02:00
refactor: slim flake.nix into nix/ entry files
2026-07-13 20:55:43 +02:00
treefmt: format the web files with prettier
2026-09-02 15:25:07 +02:00
66ac034949