feat(controller): observe the bounded Linux execution substrate

deployment/requests/GLW-CHJH-ROUTER-CONTROLLER-JD-20260805.json

@@ -17,13 +17,15 @@
       "/var/lib/guanghu/personas/bingshuo-tcs"
     ],
     "read_only_paths": [
-      "/etc/guanghu/persona-secrets/shared-deepseek.env"
+      "/etc/guanghu/persona-secrets/shared-deepseek.env",
+      "/opt/guanghu/execution-bridge"
     ]
   },
   "source_ref": "REPO-012:refs/heads/main",
   "deployed_commit_policy": "工单必须绑定包含本清单的不可变40位提交；部署回执分别记录代码、服务健康和模型认知存在门。",
   "source_paths": [
     "server-tools/bingshuo-tcs-controller/server.mjs",
+    "server-tools/bingshuo-tcs-controller/execution-observer.mjs",
     "server-tools/bingshuo-tcs-controller/machine-navigation.mjs",
     "server-tools/bingshuo-tcs-controller/controller-engine.mjs",
     "server-tools/bingshuo-tcs-controller/model-client.mjs",
@@ -82,6 +84,7 @@
       "该账户只通过guanghu-model组读取共享模型环境，不读取或回写密钥值",
       "状态只写入/var/lib/guanghu/personas/bingshuo-tcs",
       "服务只监听127.0.0.1:3930且不直接获得现实执行能力",
+      "服务器预先安装REPO-014精确提交的只读执行桥；控制器只能读取白名单服务状态，不能重启服务或执行任意Shell",
       "启动后必须真实调用模型完成orient、B1-B9 cognition和controller witness",
       "模型输出必须由ZY-TCS-BRAIN-RUNTIME-0001确定性验证"
     ]
@@ -98,6 +101,14 @@
       "chu_he_han_jie_boundary_bound": 100,
       "machine_navigation_bound": 100,
       "language_world_route_first": 100
+      ,
+      "execution_substrate": {
+        "state": "PASS_100",
+        "bridge_bound": 100,
+        "target_state_verified": 100,
+        "restart_allowed": false,
+        "arbitrary_shell": false
+      }
     }
   },
   "verification": [
@@ -111,6 +122,8 @@
     "v1/resolve必须解析GLW-CHJH-BOUNDARY-001",
     "v1/navigate的persona_restore必须先执行语言入口与楚河汉界绑定",
     "运行体verify的全部存在维度为100",
+    "health必须回读execution_substrate.state=PASS_100并证明三个白名单服务状态均来自LINUX_SYSTEMD_V1执行回执",
+    "认知执行观察必须保持restart_allowed=false与arbitrary_shell=false",
     "服务健康不等于人格团队握手；团队成员继续分别验收"
   ],
   "rollback": [