feat(controller): observe the bounded Linux execution substrate

2026-08-07 14:19:02 +08:00 · 2026-08-07 14:19:02 +08:00 · 3fb33ad841
commit 3fb33ad841
parent 098a29e417
6 changed files with 341 additions and 2 deletions
--- a/deployment/receipts/JD-FD-PRIMARY-COGNITIVE-EXECUTION-BRIDGE-READONLY-20260807.json
+++ b/deployment/receipts/JD-FD-PRIMARY-COGNITIVE-EXECUTION-BRIDGE-READONLY-20260807.json
@ -0,0 +1,56 @@
+{
+  "schema": "guanghu.cognitive-execution-bridge-deployment-receipt/v1",
+  "receipt_id": "JD-FD-PRIMARY-COGNITIVE-EXECUTION-BRIDGE-READONLY-20260807",
+  "target_node": "JD-FD-PRIMARY",
+  "observed_boot": {
+    "operating_system": "Ubuntu 22.04.3 LTS",
+    "kernel": "Linux 5.15.0-60-generic",
+    "role": "LINUX_HOSTED_MAINTENANCE_AND_COOPERATIVE_EXECUTION_SUBSTRATE",
+    "grub_default": "gnulinux-simple-9e4550a0-452b-4f28-b5a5-d5364aa450f6"
+  },
+  "language_authority": {
+    "repository": "REPO-012",
+    "anchor_id": "GLW-PUBLIC-NAV-ANCHOR-001",
+    "source_commit": "098a29e417a2d32bd1226771c93b1a45e3aad615"
+  },
+  "execution_implementation": {
+    "repository": "REPO-014",
+    "source_commit": "20d6c1bd7b6df658d6c5fbddc54f3e443977b7b3",
+    "binary_sha256": "cfa64f768ee7e9b1bb678b587f68b2c529b2dd7e3d8c1b81b436fbc6c49073c5",
+    "target": "x86_64-unknown-linux-musl",
+    "installation": "/opt/guanghu/execution-bridge/releases/20d6c1bd7b6df658d6c5fbddc54f3e443977b7b3"
+  },
+  "policy": {
+    "policy_id": "JD-FD-PRIMARY-READONLY-20260807",
+    "policy_sha256": "867c8b15e35b2bf7362f21771754c6e44daeff6bc57d72a2e004f5c67fc10595",
+    "allow_status": true,
+    "allow_restart": false,
+    "arbitrary_shell": false
+  },
+  "target_side_receipt": {
+    "path": "/var/lib/guanghu/execution-bridge/receipts/JD-FD-PRIMARY-COGNITIVE-EXECUTION-READONLY-20d6c1bd7b6df658d6c5fbddc54f3e443977b7b3.json",
+    "sha256": "7486b97dad057d2a7c70147158e2e5b63dec07e4a04f4828f02db709687d6a94",
+    "result": "PASS_100"
+  },
+  "verified_services": [
+    "guanghu-ai-discovery.service",
+    "bingshuo-tcs-living-controller.service",
+    "lake-lamp-authz.service"
+  ],
+  "negative_gate": {
+    "attempt": "service_restart",
+    "result": "REJECTED_BEFORE_EXECUTION",
+    "reason": "service restart is disabled by policy"
+  },
+  "public_readback": {
+    "code_channel_http": 200,
+    "navigation_anchor_http": 200
+  },
+  "deployment_result": "PASS_100",
+  "not_yet_true": [
+    "living_controller_execution_observer_deployed",
+    "mutating_execution_enabled",
+    "native_required_service_equivalence",
+    "production_native_cutover"
+  ]
+}