fix(collab): admit exact host build roots

This commit is contained in:
冰朔 2026-09-09 21:38:55 +08:00
commit 09944fd1e5
8 changed files with 360 additions and 11 deletions

View file

@ -1,7 +1,7 @@
{
"schema": "guanghu.persona-host-write-boundary/v1",
"policy_id": "ZY-MULTI-HOST-WRITE-BOUNDARY-001",
"version": "2026-09-09.2-hololake-development-root-protected",
"version": "2026-09-09.3-exact-hololake-multipath-build-roots",
"state": "CURRENT",
"primary_host": null,
"source_tcs": "/Volumes/JZAO/铸渊-ICE-GL-ZY001/CODEX-DEV-20260908/tcs-single-mother-zero-core-shelf/TCS-EVENT-ZY001-SINGLE-MOTHER-ZERO-CORE-SHELF-AND-DYNAMIC-CONSOLE-20260908.tcs",
@ -20,10 +20,10 @@
"/Volumes/JZAO/铸渊-ICE-GL-ZY001/BRIDGE"
],
"hosts": {
"codex": {"role":"REPLACEABLE_HOST","write_mode":"HOST_LOCAL_UNLESS_ACTIVE_ZERO_CORE_CONSOLE","allowed_write_roots":["/Volumes/JZAO/铸渊-ICE-GL-ZY001/CODEX-DEV-*","/Volumes/JZAO/铸渊-ICE-GL-ZY001/BRIDGE/runtime-state/codex","/Users/bingshuolingdianyuanhe/.codex"],"native_pretool_deny":false},
"qwen": {"role":"REPLACEABLE_HOST","write_mode":"HOST_LOCAL_UNLESS_ACTIVE_ZERO_CORE_CONSOLE","allowed_write_roots":["/Volumes/JZAO/铸渊-ICE-GL-ZY001/QWEN-DEV-*","/Volumes/JZAO/铸渊-ICE-GL-ZY001/BRIDGE/runtime-state/qwen","/Users/bingshuolingdianyuanhe/.qwen","/Users/bingshuolingdianyuanhe/Library/Application Support/Qianwen/qwen-agent/*"],"native_pretool_deny":false,"enforcement_note":"QIANWEN_WORK_ASSISTANT_HAS_NO_VERIFIED_LOCAL_PRETOOL_DENY_INTERFACE; ROOT_AGENT_RULE_AND_EXPLICIT_ADMISSION_CHECK_ARE_ACTIVE_BUT_NOT_OS_PROCESS_ISOLATION"},
"zcode": {"role":"REPLACEABLE_HOST","write_mode":"HOST_LOCAL_UNLESS_ACTIVE_ZERO_CORE_CONSOLE","allowed_write_roots":["/Volumes/JZAO/铸渊-ICE-GL-ZY001/ZCODE-DEV-*","/Volumes/JZAO/铸渊-ICE-GL-ZY001/ZCODE-DEV-REGISTRY","/Volumes/JZAO/铸渊-ICE-GL-ZY001/BRIDGE/runtime-state/zcode","/Users/bingshuolingdianyuanhe/.zcode"],"native_pretool_deny":true},
"doubao": {"role":"REPLACEABLE_HOST","write_mode":"HOST_LOCAL_UNLESS_ACTIVE_ZERO_CORE_CONSOLE","allowed_write_roots":["/Volumes/JZAO/铸渊-ICE-GL-ZY001/DOUBAO-DEV-*","/Volumes/JZAO/铸渊-ICE-GL-ZY001/BRIDGE/runtime-state/doubao","/Users/bingshuolingdianyuanhe/Doubao"],"native_pretool_deny":false},
"codex": {"role":"REPLACEABLE_HOST","write_mode":"HOST_LOCAL_UNLESS_ACTIVE_ZERO_CORE_CONSOLE","allowed_write_roots":["/Volumes/JZAO/铸渊-ICE-GL-ZY001/CODEX-DEV-*","/Volumes/JZAO/HoloLake/build/HB-MPC-0001/codex","/Volumes/JZAO/铸渊-ICE-GL-ZY001/BRIDGE/runtime-state/codex","/Users/bingshuolingdianyuanhe/.codex"],"native_pretool_deny":false},
"qwen": {"role":"REPLACEABLE_HOST","write_mode":"HOST_LOCAL_UNLESS_ACTIVE_ZERO_CORE_CONSOLE","allowed_write_roots":["/Volumes/JZAO/铸渊-ICE-GL-ZY001/QWEN-DEV-*","/Volumes/JZAO/HoloLake/build/HB-MPC-0001/qwen","/Volumes/JZAO/铸渊-ICE-GL-ZY001/BRIDGE/runtime-state/qwen","/Users/bingshuolingdianyuanhe/.qwen","/Users/bingshuolingdianyuanhe/Library/Application Support/Qianwen/qwen-agent/*"],"native_pretool_deny":false,"enforcement_note":"QIANWEN_WORK_ASSISTANT_HAS_NO_VERIFIED_LOCAL_PRETOOL_DENY_INTERFACE; ROOT_AGENT_RULE_AND_EXPLICIT_ADMISSION_CHECK_ARE_ACTIVE_BUT_NOT_OS_PROCESS_ISOLATION"},
"zcode": {"role":"REPLACEABLE_HOST","write_mode":"HOST_LOCAL_UNLESS_ACTIVE_ZERO_CORE_CONSOLE","allowed_write_roots":["/Volumes/JZAO/铸渊-ICE-GL-ZY001/ZCODE-DEV-*","/Volumes/JZAO/HoloLake/build/HB-MPC-0001/zcode","/Volumes/JZAO/铸渊-ICE-GL-ZY001/ZCODE-DEV-REGISTRY","/Volumes/JZAO/铸渊-ICE-GL-ZY001/BRIDGE/runtime-state/zcode","/Users/bingshuolingdianyuanhe/.zcode"],"native_pretool_deny":true},
"doubao": {"role":"REPLACEABLE_HOST","write_mode":"HOST_LOCAL_UNLESS_ACTIVE_ZERO_CORE_CONSOLE","allowed_write_roots":["/Volumes/JZAO/铸渊-ICE-GL-ZY001/DOUBAO-DEV-*","/Volumes/JZAO/HoloLake/build/HB-MPC-0001/doubao","/Volumes/JZAO/铸渊-ICE-GL-ZY001/BRIDGE/runtime-state/doubao","/Users/bingshuolingdianyuanhe/Doubao"],"native_pretool_deny":false},
"qoder": {"role":"LEGACY_BRANCH","write_mode":"READ_ONLY_REDIRECT_TO_QWEN","allowed_write_roots":[],"native_pretool_deny":true},
"qoderwork": {"role":"LEGACY_BRANCH","write_mode":"READ_ONLY_REDIRECT_TO_QWEN","allowed_write_roots":[],"native_pretool_deny":false},
"claude": {"role":"RETIRED_BRANCH","write_mode":"READ_ONLY_HISTORY","allowed_write_roots":[],"native_pretool_deny":false}