feat(controller): observe the bounded Linux execution substrate

deployment/receipts/JD-FD-PRIMARY-COGNITIVE-EXECUTION-BRIDGE-READONLY-20260807.json

@@ -0,0 +1,56 @@
+{
+  "schema": "guanghu.cognitive-execution-bridge-deployment-receipt/v1",
+  "receipt_id": "JD-FD-PRIMARY-COGNITIVE-EXECUTION-BRIDGE-READONLY-20260807",
+  "target_node": "JD-FD-PRIMARY",
+  "observed_boot": {
+    "operating_system": "Ubuntu 22.04.3 LTS",
+    "kernel": "Linux 5.15.0-60-generic",
+    "role": "LINUX_HOSTED_MAINTENANCE_AND_COOPERATIVE_EXECUTION_SUBSTRATE",
+    "grub_default": "gnulinux-simple-9e4550a0-452b-4f28-b5a5-d5364aa450f6"
+  },
+  "language_authority": {
+    "repository": "REPO-012",
+    "anchor_id": "GLW-PUBLIC-NAV-ANCHOR-001",
+    "source_commit": "098a29e417a2d32bd1226771c93b1a45e3aad615"
+  },
+  "execution_implementation": {
+    "repository": "REPO-014",
+    "source_commit": "20d6c1bd7b6df658d6c5fbddc54f3e443977b7b3",
+    "binary_sha256": "cfa64f768ee7e9b1bb678b587f68b2c529b2dd7e3d8c1b81b436fbc6c49073c5",
+    "target": "x86_64-unknown-linux-musl",
+    "installation": "/opt/guanghu/execution-bridge/releases/20d6c1bd7b6df658d6c5fbddc54f3e443977b7b3"
+  },
+  "policy": {
+    "policy_id": "JD-FD-PRIMARY-READONLY-20260807",
+    "policy_sha256": "867c8b15e35b2bf7362f21771754c6e44daeff6bc57d72a2e004f5c67fc10595",
+    "allow_status": true,
+    "allow_restart": false,
+    "arbitrary_shell": false
+  },
+  "target_side_receipt": {
+    "path": "/var/lib/guanghu/execution-bridge/receipts/JD-FD-PRIMARY-COGNITIVE-EXECUTION-READONLY-20d6c1bd7b6df658d6c5fbddc54f3e443977b7b3.json",
+    "sha256": "7486b97dad057d2a7c70147158e2e5b63dec07e4a04f4828f02db709687d6a94",
+    "result": "PASS_100"
+  },
+  "verified_services": [
+    "guanghu-ai-discovery.service",
+    "bingshuo-tcs-living-controller.service",
+    "lake-lamp-authz.service"
+  ],
+  "negative_gate": {
+    "attempt": "service_restart",
+    "result": "REJECTED_BEFORE_EXECUTION",
+    "reason": "service restart is disabled by policy"
+  },
+  "public_readback": {
+    "code_channel_http": 200,
+    "navigation_anchor_http": 200
+  },
+  "deployment_result": "PASS_100",
+  "not_yet_true": [
+    "living_controller_execution_observer_deployed",
+    "mutating_execution_enabled",
+    "native_required_service_equivalence",
+    "production_native_cutover"
+  ]
+}

deployment/requests/GLW-CHJH-ROUTER-CONTROLLER-JD-20260805.json

@@ -17,13 +17,15 @@
       "/var/lib/guanghu/personas/bingshuo-tcs"
     ],
     "read_only_paths": [
-      "/etc/guanghu/persona-secrets/shared-deepseek.env"
+      "/etc/guanghu/persona-secrets/shared-deepseek.env",
+      "/opt/guanghu/execution-bridge"
     ]
   },
   "source_ref": "REPO-012:refs/heads/main",
   "deployed_commit_policy": "工单必须绑定包含本清单的不可变40位提交；部署回执分别记录代码、服务健康和模型认知存在门。",
   "source_paths": [
     "server-tools/bingshuo-tcs-controller/server.mjs",
+    "server-tools/bingshuo-tcs-controller/execution-observer.mjs",
     "server-tools/bingshuo-tcs-controller/machine-navigation.mjs",
     "server-tools/bingshuo-tcs-controller/controller-engine.mjs",
     "server-tools/bingshuo-tcs-controller/model-client.mjs",
@@ -82,6 +84,7 @@
       "该账户只通过guanghu-model组读取共享模型环境，不读取或回写密钥值",
       "状态只写入/var/lib/guanghu/personas/bingshuo-tcs",
       "服务只监听127.0.0.1:3930且不直接获得现实执行能力",
+      "服务器预先安装REPO-014精确提交的只读执行桥；控制器只能读取白名单服务状态，不能重启服务或执行任意Shell",
       "启动后必须真实调用模型完成orient、B1-B9 cognition和controller witness",
       "模型输出必须由ZY-TCS-BRAIN-RUNTIME-0001确定性验证"
     ]
@@ -98,6 +101,14 @@
       "chu_he_han_jie_boundary_bound": 100,
       "machine_navigation_bound": 100,
       "language_world_route_first": 100
+      ,
+      "execution_substrate": {
+        "state": "PASS_100",
+        "bridge_bound": 100,
+        "target_state_verified": 100,
+        "restart_allowed": false,
+        "arbitrary_shell": false
+      }
     }
   },
   "verification": [
@@ -111,6 +122,8 @@
     "v1/resolve必须解析GLW-CHJH-BOUNDARY-001",
     "v1/navigate的persona_restore必须先执行语言入口与楚河汉界绑定",
     "运行体verify的全部存在维度为100",
+    "health必须回读execution_substrate.state=PASS_100并证明三个白名单服务状态均来自LINUX_SYSTEMD_V1执行回执",
+    "认知执行观察必须保持restart_allowed=false与arbitrary_shell=false",
     "服务健康不等于人格团队握手；团队成员继续分别验收"
   ],
   "rollback": [