guanghu-ice-heart/deployment/requests/HLCC-JD-PERSONAL-CHANNEL-ACTIVATE-PROVISION-20260723.json

57 lines
2.3 KiB
JSON
Raw Normal View History

{
"schema": "guanghu.architecture-provision-request/v1",
"request_id": "HLCC-JD-PERSONAL-CHANNEL-ACTIVATE-PROVISION-20260723",
"target_node": "JD-FD-PRIMARY",
"architecture_id": "GLS-0239",
"module": {
"code": "HLCC-FD-ICE-ACT",
"name": "光湖代码频道第五域个人子频道低权限激活器",
"bind": "none",
"owner": "systemd",
"unit": "hlcc-jd-personal-channel-activator.service",
"run_user": "guanghu",
"writable_paths": [],
"read_only_paths": []
},
"source_ref": "REPO-001:refs/heads/main",
"deployed_commit_policy": "resolve immutable commit during provision and record it in the deployment receipt",
"source_paths": [
"server-tools/hololake-code-channel/jd-candidate/activate-staged-candidate.py",
"server-tools/hololake-code-channel/jd-candidate/hlcc-jd-personal-channel-activator.service"
],
"initial_provision": {
"kind": "new-architecture-unit",
"not_an_existing_action_bridge_extension": true,
"requires": [
"read only the MainPID of hlcc-jd-candidate.service",
"verify the process belongs to the same low-privilege guanghu account",
"verify the exact HLCC bootstrap command path",
"send SIGTERM only to that verified process",
"allow the existing Restart=always policy to start the staged personal channel",
"wait until owner migration, fresh root commit and public repository verification complete"
]
},
"verification": [
"GET http://127.0.0.1:3341/health reports ready=true and stage=ready",
"the activator cannot signal another user's process",
"the activator has no shell, SSH, credential or arbitrary service restart interface"
],
"runtime_check": {
"url": "http://127.0.0.1:3341/health",
"expected": {
"ok": true,
"mode": "isolated-candidate",
"version": "16.0.1",
"code": "HLCC-JD-CANDIDATE-01",
"ready": true,
"stage": "ready",
"package_profile": "full-offline-v16.0.1"
}
},
"rollback": [
"disable and remove only hlcc-jd-personal-channel-activator.service",
"restore the candidate unit and SQLite backup recorded by the stage request",
"leave the legacy Fifth Domain service and database unchanged"
],
"status": "ARCHITECTURE_PACKAGE_READY · INITIAL_PROVISION_PENDING"
}