Registering this installation

An installation asks before it registers. A fresh MeshWeaver installation configured for a plugin registry without a key (the Homebrew default: memex-local registry https://memex.meshweaver.cloud) does not register on first start. It starts, and waits for a platform admin of this installation to accept two texts on its behalf. Only then does it register, obtain its token and read the catalogue.

The tile

Every global admin who signs in gets a This instance tile on their home (the Hosting plugin's InstanceAppTileLogonAction, run on every logon so an admin promoted later gets it too). It opens /{you}/Instance — an area on your own hub, the way the platform's default apps work. Non-admins who open the URL are told the page is for platform admins and see nothing else.

Before consent

The page shows where the installation would register and as what:

Below it, the two texts as published on this installation — the privacy statement (Admin/Privacy, the page served at /privacy; edited under Settings ▸ Privacy) and the platform terms (Admin/Terms, created with generic default terms on first use and editable like any Markdown node) — with one checkbox each and Register this installation. Both boxes must be ticked; with one, the page refuses and writes nothing.

What registering does

1. The consent is written to Admin/InstanceConsent under your own identity — the record carries the instance id, the registry, a hash of each text exactly as shown, and who accepted when. Writing the Admin partition is what only a global admin may do; that is the gate.
2. The platform's auto-registration, which was waiting on that record through a live query, wakes: it presents the instance id to the registry without a key (open registration), the registry enrols it into its default plan — free on memex.meshweaver.cloud — and returns the instance's durable key exactly once. The key is stored encrypted under this installation's master key, together with the plan the registry echoed.
3. From then on every registry call exchanges that key for a short-lived signed token and presents the token; the key itself leaves the process once per token lifetime.
4. The default install runs: the packages the installation is granted, at its plan.

The page follows all of it live: Registered with the timestamp, Plan, and Packages available to this installation — the list the registry serves, read through the same token exchange, so it is exactly what the Store shows. A pro or enterprise package is not on it; the registry serves what the plan covers, and a registry administrator raises the plan on the instance record there.

Withdrawing

Withdraw consent deletes the record. The installation stops registering. It does not delete the stored credential — an already-registered installation keeps authenticating until a platform admin deletes Admin/PluginRegistryCredential/{registry-host}; that is the louder step, kept separate on purpose.

Installations provisioned with a key

An installation whose operator provisioned it with a registration key (PluginCatalog:BootstrapKey, minted on the registry for a plan) is not gated: its operator accepted the terms on the fleet's side, and an unattended pod asked the same question would stay unregistered forever. The page says so and shows the status only.

Where the pieces live

• The app: MeshWeaver.Hosting.Instance — a module that ships in the portal image (Modules:Assemblies), because it must exist before any content package can be installed: before registration there is no registry token to install anything with.
• The platform half: InstanceConsentService, InstanceConsent, and the consent gate in InstanceAutoRegistrationService (MeshWeaver core, MeshWeaver.PluginCatalog).
• The design: Doc/Architecture/InstanceIdentityAndSetup on the platform.
• The fleet side of Hosting — deployment records, instance actions, the Fleet Console — is documented in Operating the fleet.