{
  "schema": "guanghu.architecture-provision-request/v1",
  "request_id": "HLCC-JD-PERSONAL-CHANNEL-STAGE-PROVISION-20260723",
  "target_node": "JD-FD-PRIMARY",
  "architecture_id": "GLS-0239",
  "module": {
    "code": "HLCC-FD-ICE",
    "name": "光湖代码频道第五域个人子频道",
    "bind": "loopback:3340 and loopback:3341",
    "owner": "systemd",
    "unit": "hlcc-jd-candidate.service",
    "run_user": "guanghu",
    "writable_paths": [
      "/var/lib/guanghu/personas/guanghu/hlcc-v16.0.1"
    ],
    "read_only_paths": []
  },
  "source_ref": "REPO-001:refs/heads/main",
  "deployed_commit_policy": "resolve immutable commit during provision and record it in the deployment receipt",
  "source_paths": [
    "server-tools/hololake-code-channel/jd-candidate/hlcc-bootstrap.py",
    "server-tools/hololake-code-channel/jd-candidate/prepare-owner-identity-source.py",
    "server-tools/hololake-code-channel/jd-candidate/app.ini",
    "server-tools/hololake-code-channel/jd-candidate/hlcc-jd-candidate.service"
  ],
  "initial_provision": {
    "kind": "new-architecture-unit",
    "not_an_existing_action_bridge_extension": true,
    "requires": [
      "stage the immutable candidate service without changing the current Fifth Domain service",
      "publish the final root URL as https://guanghulab.com/code/",
      "allow anonymous read access while keeping registration disabled",
      "copy only the bingshuo local identity and password hash from the legacy database",
      "consume the one-user owner identity handoff instead of granting the service access to the legacy database directory",
      "never copy legacy access tokens, MFA, repositories, activity or Git history",
      "create a fresh bingshuo/fifth-domain root commit numbered HLCC-ICE-000001",
      "delete the temporary repository bootstrap token after the first push",
      "keep official update checks, Actions and mirrors disabled"
    ]
  },
  "verification": [
    "the staged unit remains under the low-privilege guanghu account",
    "the legacy Gitea service and database are not modified",
    "the new repository is public and uses main as its default branch",
    "the new database contains one active admin owner and no migrated legacy access token",
    "the root commit message starts with HLCC-ICE-000001"
  ],
  "runtime_check": {
    "url": "http://127.0.0.1:3341/health",
    "expected": {
      "ok": true,
      "mode": "isolated-candidate",
      "version": "16.0.1",
      "code": "HLCC-JD-CANDIDATE-01",
      "ready": true,
      "stage": "ready",
      "package_profile": "full-offline-v16.0.1"
    }
  },
  "rollback": [
    "restore the backed-up hlcc-jd-candidate.service",
    "restart the previous isolated candidate",
    "restore the pre-migration channel SQLite backup if identity or repository verification fails",
    "leave the legacy Fifth Domain service and database unchanged"
  ],
  "status": "ARCHITECTURE_PACKAGE_READY · INITIAL_PROVISION_PENDING"
}
