Unreleased: pool membership¶

Committed changes that carry no release coordinate yet and decide which ids the subscription pool counts as its members, and how a call for a member’s credential ends. The other unreleased subscription changes are on unreleased subscription changes.

Unreleased: the pool lists only the vault's members¶

Every id that ever served a request through the gateway, test and renamed ones included, stood in brama subscription list beside the operator’s real accounts as undiscovered. The pool now holds what the vault lists, plus retired members, which still say why they left. An id only the usage history remembers is answered apart under remembered ({id, provider}), counted by no lease, session limit or purchase shortage, printed under remembered by the usage history only, not pool members and dropped with brama subscription forget.

Brama Desktop’s Subscription Pool screen lists them under the purchase panel in Remembered by the usage history only, each with Forget, which takes a typed reason and runs the same forget; the member inspector no longer has a Not discovered state, and an incomplete pool read no longer keeps such an id among the members. Real test: tests/subscriptions/journeys/forget_remembered_member.sh.

Unreleased: a credential call that stands ends the request with its cause¶

A chat request whose vault child (read credential account, inspect credential account, list subscriptions) never ended was never answered: the client got an empty reply minutes later, and the gateway logged no end, no refusal and no standing child. Every call to the credential source is now recorded while it stands. Once one has stood the refresh interval this host’s Stado resolver declares, GET /readyz answers 503 with ready: false and credential_source naming the oldest call, its pid and how long it stood; the same reading ends the vault child, logs vault child abandoned by the readiness reading, and refuses the request that waited on it with that sentence. Real test: cargo test --test readiness-vault-standing -- --ignored, against a vault executable that accepts and never answers.