guanghu-ice-heart/deployment/navigation-maps/JD-FD-PRIMARY.json

{
  "schema": "guanghu.navigation-map/v1",
  "node_id": "JD-FD-PRIMARY",
  "role": "第五域国内主节点与统一运维入口",
  "modules": [
    { "code": "JD-GTW-01", "name": "Gatekeeper v3.2", "bind": "loopback:3911", "owner": "systemd" },
    { "code": "JD-AUTH-01", "name": "小湖灯邮件链接授权", "bind": "loopback:3921", "owner": "systemd" },
    { "code": "JD-FRG-01", "name": "第五域国内代码仓库", "bind": "loopback:3001", "owner": "systemd", "actual_product": "Gitea", "actual_version": "1.23.7", "intended_product": "Guanghu platform derived from Forgejo", "state": "DEPLOYMENT_IDENTITY_MISMATCH" },
    { "code": "JD-HUB-01", "name": "京东应用入口", "bind": "loopback:8088", "owner": "systemd", "version": "2.0.0", "state": "DEPLOYED_AND_VERIFIED", "source_commit": "09c93b55ad73bf3af52eebdbfea61731386e264d" },
    { "code": "JD-SEN-01", "name": "状态变化哨兵", "bind": "timer:15m", "owner": "systemd" },
    { "code": "JD-ROUTE-01", "name": "已登记下游节点 SSH 路由", "bind": "private-keys", "owner": "root", "registered_targets": ["AW-GZ-001"] },
    { "code": "JD-ACT-01", "name": "固定动作执行桥", "bind": "unix-socket", "owner": "root", "actions": ["inspect-services", "health-check", "inspect-code-channel-owner-auth"] },
    { "code": "JD-OWNER-ACCESS-01", "name": "冰朔与人格体受限登录执行器", "bind": "unix-socket", "owner": "root", "actions": ["inspect-owner-ssh-login", "disable-owner-password-login", "restore-owner-password-login", "restore-code-channel-owner-login"], "action_meanings": { "inspect-owner-ssh-login": "只回读 SSH 有效认证配置，不显示密钥或密码", "disable-owner-password-login": "关闭 SSH 密码与交互式认证，保留人格体工单使用的受控机器密钥通道", "restore-owner-password-login": "仅恢复京东服务器 SSH 密码认证开关，不修改代码频道账号", "restore-code-channel-owner-login": "仅将新代码频道 bingshuo 凭证恢复为旧第五域本机凭证，不读取明文密码" } },
    { "code": "JD-ARCH-PROVISION-01", "name": "已批准新架构首次安装器", "bind": "unix-socket", "owner": "root", "actions": ["provision-approved-architecture"], "state": "ACTIVE" },
    { "code": "JD-LAN-01", "name": "光湖·来光者导航只读召回服务", "bind": "loopback:3924", "owner": "systemd", "architecture": "GLS-0231", "state": "DEPLOYED_AND_VERIFIED", "source_commit": "f4a4b5996c83b55d99172f3196f4a0d77ed5f3e9" },
    {
      "code": "JD-HLCC-CANDIDATE-01",
      "name": "第五域光湖代码频道隔离候选启动壳",
      "bind": "loopback:3340,3341",
      "owner": "guanghu",
      "state": "ACTIVE_READY",
      "source_commit": "8c0642d4f208d1d0027fa1956de372ce61f191ef",
      "receipt": "deployment/receipts/HLCC-JD-RUNTIME-CHECKPOINT-20260723.json"
    }
  ],
  "planned_modules": [
    {
      "code": "JD-HLCC-OFFLINE-01",
      "name": "光湖代码频道离线源码与安装材料库",
      "bind": "none-storage-only",
      "owner": "guanghu",
      "state": "RELAY_READY · TRANSFER_PENDING",
      "receipt": "deployment/receipts/HLCC-SG-JD-RELAY-CHECKPOINT-20260723.json"
    }
  ],
  "mandatory_order": [
    "read-navigation-map",
    "ack-current-map",
    "verify-offline-manifest",
    "verify-forgejo-gpg-signature",
    "execute-registered-action"
  ],
  "forbidden": [
    "download-forgejo-directly-from-domestic-node",
    "share-database-or-repository-data-with-enterprise-instance",
    "automatic-upstream-update",
    "arbitrary-shell-through-authorization-api",
    "cross-target-session-reuse",
    "secret-in-repository"
  ]
}