glm-5.2 bf6ce957c0 docs(arch): tighten tls/endpoint/client specs — remove connect/connect_quic, move CallCredentials to core, shed alknet-call TLS deps ...

Review of the three new crates (alknet-tls, alknet-endpoint, alknet-client)
+ revised core found compile-blocking inconsistencies, stale claims, and
dep-graph contradictions. All resolved:

Critical:
- C1: CallClient::connect / ChannelClient::connect_quic REMOVED (not
  delegated) — keeping them as thin wrappers over AlknetClient::dial_quic
  would make protocol crates depend on alknet-client, contradicting the
  dep graph. Callers compose dial + take-over (2 lines).
- C2: alknet-client feature gates now pull alknet-core/quinn +
  alknet-core/iroh (for Connection::from_quinn_with_alpn / from_iroh).
- C3: rustls-native-certs + webpki-roots added to alknet-tls deps
  (always-present, not feature-gated — CA-verify path is transport-agnostic).

Warning:
- W1: CallCredentials/RemoteIdentity moved to alknet-core (from
  alknet-call) — the dial must not depend on the call protocol; not a
  two-way-door, it determines the dep graph.
- W2: webpki-roots fallback implemented in spec (ADR-088 §5 added) —
  the code claimed a fallback that never existed; now the store is never
  empty, NoRootAnchors unreachable, containerized deployments work.
- W3: EndpointError removed entirely (BindFailed + HandlerNotFound both
  vestigial after ADR-083); shutdown() is now infallible.
- W4: FingerprintPinVerifier moved to alknet-tls (from alknet-call) —
  alknet-call sheds quinn/rustls/rustls-pemfile/rustls-native-certs
  entirely; CallClient becomes a pure protocol crate.

Plus: ClientError removed (only produced by removed connect); S1
(CallCredentials → ClientVerifierContext mapping + auth_token stripped
at TLS boundary documented); amendment notes on ADR-017, ADR-069,
ADR-080, ADR-082, ADR-087, ADR-090; overview crate graph + README index
updated.

29 files, consistency-reviewed.

2026-07-16 11:33:18 +00:00

..

001-bistream-type-definition.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

002-authcontext-resolution-timing.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

003-alpn-string-naming-convention.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

004-dynamic-handler-registration-at-runtime-vs-static-at-startup.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

005-multi-connectivity-endpoint.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

006-server-side-alpn-vs-client-side-alpn.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

007-call-protocol-scope-within-a-connection.md

docs(arch): unweld CallClient from QUIC — spawn_dispatch primary, connect convenience (ADR-017 Am. 2026-07-13)

2026-07-13 09:53:43 +00:00

008-vault-integration-point.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

009-wasm-target-boundaries.md

docs(arch): sync specs to transport generalization sweep (ADR-064, ADR-065)

2026-07-09 07:40:51 +00:00

010-git-adapter-scope-smart-protocol-only-or-full-server.md

tasks(arch): adopt taskgraph for architecture work — blocker tasks for deferred OQs, level mapping, status fixes

2026-07-06 16:34:01 +00:00

011-handler-level-auth-resolution-observability.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

012-tls-identity-provisioning-in-alknetendpoint.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

013-operation-path-format-and-routing-scope.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

014-batch-operation-semantics.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

015-call-protocol-client-and-adapter-contract.md

docs(arch): tighten tls/endpoint/client specs — remove connect/connect_quic, move CallCredentials to core, shed alknet-call TLS deps

2026-07-16 11:33:18 +00:00

016-safe-vault-operations-for-call-protocol-exposure.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

017-abort-cascade-semantics-for-nested-calls.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

018-privilege-model-and-authority-context.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

019-session-scoped-operation-registries-and-agent-written-operations.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

020-salt-kdf-and-encryption-key-derivation-method.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

021-remote-vault-administration.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

022-key-rotation-mechanism.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

023-handler-identity-registration-path-and-composition-authority.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

024-operation-error-schemas.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

025-remote-safe-marking-shape-for-callclient-peer-scoped-filtering-dissolved-by-adr-029.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

026-operationadapter-error-type-adaptererror-variants.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

027-from-call-re-import-trigger.md

docs(arch): hub-wiring cluster — aggregated env, peer_operations, from_call cleanup, alknet-hub crate spec

2026-07-09 16:01:30 +00:00

028-from-call-namespace-collision-behavior.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

029-callclient-tls-client-auth-and-remote-identity-verification.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

030-peerref-any-routing-policy.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

031-services-list-peers-re-export-semantics.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

032-multi-hop-federation.md

fix(agents): break the hedging-at-the-root pattern — deferred(unclear), impacts field, reviewer detection

2026-07-15 07:35:55 +00:00

033-peerid-cryptographic-identity-vs-stable-logical-identifier.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

034-persistent-peer-registry-cross-node-state-storage.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

035-api-key-identity-vs-peer-identity-dissolved.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

036-concrete-persistence-adapter-shapes.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

037-x-509-outgoing-only-case-three-peer-roles.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

038-webtransport-standalone-relay-service-scope.md

fix(agents): break the hedging-at-the-root pattern — deferred(unclear), impacts field, reviewer detection

2026-07-15 07:35:55 +00:00

039-to-openapi-published-spec-versioning.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

040-reqwest-client-config-and-connection-pooling.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

041-stream-operators-library.md

fix(agents): break the hedging-at-the-root pattern — deferred(unclear), impacts field, reviewer detection

2026-07-15 07:35:55 +00:00

042-dynamic-resource-ownership-for-runtime-spawned-resources.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

043-ttycontrol-as-a-clone-trait-object.md

docs(arch): alknet-tty spec sanity-check fixes — TtyControlHandle newtype (C1), backend cleanup contract (W1, ADR-056), clarifications (S1-S5)

2026-07-07 10:38:49 +00:00

044-terminal-modes-tty-modes.md

fix(agents): break the hedging-at-the-root pattern — deferred(unclear), impacts field, reviewer detection

2026-07-15 07:35:55 +00:00

045-flow-control-for-high-throughput-stdout.md

docs(arch): resolve OQ-45 — no application-level windowing; QUIC per-stream flow control suffices

2026-07-07 09:36:18 +00:00

046-runner-api-surface.md

fix(agents): break the hedging-at-the-root pattern — deferred(unclear), impacts field, reviewer detection

2026-07-15 07:35:55 +00:00

047-stdin-closure-canonical-signal.md

docs(arch): decompose open-questions.md into per-OQ files under questions/

2026-07-06 16:07:59 +00:00

048-network-and-volume-operation-surface.md

fix(agents): break the hedging-at-the-root pattern — deferred(unclear), impacts field, reviewer detection

2026-07-15 07:35:55 +00:00

049-image-build-buildkit-scope.md

fix(agents): break the hedging-at-the-root pattern — deferred(unclear), impacts field, reviewer detection

2026-07-15 07:35:55 +00:00

050-docker-system-events-subscription.md

docs(arch): resolve OQ-050 — include docker/system/events in v1

2026-07-10 07:31:55 +00:00

051-container-create-options-surface.md

fix(agents): break the hedging-at-the-root pattern — deferred(unclear), impacts field, reviewer detection

2026-07-15 07:35:55 +00:00

052-callconnection-wait-for-close.md

fix(agents): break the hedging-at-the-root pattern — deferred(unclear), impacts field, reviewer detection

2026-07-15 07:35:55 +00:00

053-backoff-config-defaults.md

fix(agents): break the hedging-at-the-root pattern — deferred(unclear), impacts field, reviewer detection

2026-07-15 07:35:55 +00:00

054-inbound-worker-hook-placement.md

docs(arch): fix inbound worker hook — callback inside handle(), not post-hoc

2026-07-11 07:46:00 +00:00

055-alknetclient-establishment-extraction.md

docs(arch): tighten tls/endpoint/client specs — remove connect/connect_quic, move CallCredentials to core, shed alknet-call TLS deps

2026-07-16 11:33:18 +00:00

056-full-channel-level-flow-control-windowing.md

fix(agents): break the hedging-at-the-root pattern — deferred(unclear), impacts field, reviewer detection

2026-07-15 07:35:55 +00:00

057-two-pump-helper-extraction.md

fix(agents): break the hedging-at-the-root pattern — deferred(unclear), impacts field, reviewer detection

2026-07-15 07:35:55 +00:00

058-worker-registration-flow.md

fix(agents): break the hedging-at-the-root pattern — deferred(unclear), impacts field, reviewer detection

2026-07-15 07:35:55 +00:00

059-fingerprint-module-location.md

docs(arch): resolve OQ-59 (fingerprint stays in core) + ADR-084 (aws-lc-rs crypto provider)

2026-07-14 09:53:43 +00:00

060-transport-construction-location.md

docs(arch): TCP+TLS as first-class owned transport — resolves OQ-60, dissolves OQ-61

2026-07-14 08:58:50 +00:00

061-multi-owner-shutdown-coordination.md

docs(arch): TCP+TLS as first-class owned transport — resolves OQ-60, dissolves OQ-61

2026-07-14 08:58:50 +00:00

062-alpn-list-sharing-two-config-hub.md

docs(arch): endpoint types and entry points (ADR-086) — resolves OQ-62

2026-07-15 05:19:11 +00:00

063-tlserror-shape.md

docs(arch): tighten tls/endpoint/client specs — remove connect/connect_quic, move CallCredentials to core, shed alknet-call TLS deps

2026-07-16 11:33:18 +00:00

064-client-side-tls-helper.md

docs(arch): tighten tls/endpoint/client specs — remove connect/connect_quic, move CallCredentials to core, shed alknet-call TLS deps

2026-07-16 11:33:18 +00:00

065-websocket-carrying-channels.md

fix(agents): break the hedging-at-the-root pattern — deferred(unclear), impacts field, reviewer detection

2026-07-15 07:35:55 +00:00

066-alknet-register-wire-protocol.md

docs(arch): AlknetClient native dial seam — resolves OQ-55 (ADR-089)

2026-07-15 12:50:13 +00:00

067-iroh-proxy-support.md

docs(arch): resolve OQ-67 — iroh proxy force-relay-only + HTTP-to-SOCKS5 bridge (ADR-090 §5 amended)

2026-07-16 09:18:56 +00:00