Merge pull request '光湖 OS：登记京东节点首个受控执行回执' (#18) from codex/jd-bounded-restart-receipt-20260807 into main

deployment/receipts/JD-FD-PRIMARY-COGNITIVE-EXECUTION-STAGE-B-20260807.json

@@ -0,0 +1,62 @@
+{
+  "schema": "guanghu.cognitive-execution-stage-b-deployment-receipt/v1",
+  "receipt_id": "JD-FD-PRIMARY-COGNITIVE-EXECUTION-STAGE-B-20260807",
+  "target_node": "JD-FD-PRIMARY",
+  "observed_boot": {
+    "operating_system": "Ubuntu 22.04.3 LTS",
+    "kernel": "Linux 5.15.0-60-generic",
+    "role": "LINUX_HOSTED_MAINTENANCE_AND_COOPERATIVE_EXECUTION_SUBSTRATE",
+    "grub_default": "gnulinux-simple-9e4550a0-452b-4f28-b5a5-d5364aa450f6"
+  },
+  "language_authority": {
+    "repository": "REPO-012",
+    "anchor_id": "GLW-PUBLIC-NAV-ANCHOR-001"
+  },
+  "execution_implementation": {
+    "repository": "REPO-014",
+    "source_commit": "e94c4f608fb05712586aacdc37b88b6a783a1558",
+    "source_tree": "76be2fa8e83a0230253f09882ca468fb6e77a21b",
+    "quality_gate": "GHNQG_PASS_100",
+    "quality_receipt_sha256": "fb289f2851c1b21e24483d877490e78bfd47585e350a17ef94fcca6963d53d35",
+    "binary_sha256": "29364d8eaf359acdf5c1437f8665d18f0483549170ca6908c45fde7ee5153d11",
+    "target": "x86_64-unknown-linux-musl",
+    "installation": "/opt/guanghu/execution-bridge/releases/e94c4f608fb05712586aacdc37b88b6a783a1558"
+  },
+  "steady_state_policy": {
+    "policy_id": "JD-FD-PRIMARY-READONLY-E94C4F6-20260807",
+    "policy_sha256": "3b92af76330a40e2310131972cde9ceef8d7f374c8bcad066b6b42e0b301d245",
+    "allow_status": true,
+    "allow_restart": false,
+    "arbitrary_shell": false
+  },
+  "bounded_action": {
+    "authorization_route": "VERIFIED_LOCAL_DEDICATED_KEY_DIRECT_TASK_SCOPE",
+    "authorization_id": "GH-OS-AUTH-BINGSHUO-JD-FD-PRIMARY-001:STAGE-B:E94C4F6",
+    "action": "service_restart",
+    "resource": "guanghu-ai-discovery.service",
+    "rollback_checkpoint_id": "JD-AI-DISCOVERY-ACTIVE-E94C4F6",
+    "pre_pid": "747",
+    "post_pid": "528146",
+    "rollback_attempted": false,
+    "one_time_policy_removed_after_execution": true,
+    "result": "PASS_100"
+  },
+  "target_side_receipts": {
+    "aggregate_path": "/var/lib/guanghu/execution-bridge/receipts/JD-FD-PRIMARY-COGNITIVE-EXECUTION-STAGE-B-e94c4f608fb05712586aacdc37b88b6a783a1558.json",
+    "aggregate_sha256": "01c86d9ecdb85c154eef06fac6ba4de4a096f20a1e3abd585399b4cc16630f48",
+    "action_path": "/var/lib/guanghu/execution-bridge/receipts/JD-STAGE-B-AI-DISCOVERY-RESTART-E94C4F6.json",
+    "action_sha256": "4aafa3bae128443281b9f3f78b396fb40c252978637d11e2b6bd87c979b84231"
+  },
+  "post_action_readback": {
+    "guanghu_ai_discovery": "active",
+    "bingshuo_tcs_living_controller": "active",
+    "lake_lamp_authz": "active",
+    "controller_phase": "RUNNING_COMPANION",
+    "controller_execution_substrate": "PASS_100",
+    "controller_restart_allowed": false,
+    "public_code_http": 200,
+    "public_anchor_http": 200
+  },
+  "deployment_result": "PASS_100",
+  "truth_boundary": "This receipt proves one exact, policy-bound service restart through the Guanghu execution bridge and the return to a read-only steady-state policy on the current Linux-hosted JD control node. It does not grant a reusable restart authority, enable arbitrary shell, change the boot default, prove native service equivalence, or prove production native cutover."
+}

deployment/requests/GLW-CHJH-ROUTER-CONTROLLER-JD-20260805.json

@@ -124,6 +124,8 @@
     "运行体verify的全部存在维度为100",
     "health必须回读execution_substrate.state=PASS_100并证明三个白名单服务状态均来自LINUX_SYSTEMD_V1执行回执",
     "认知执行观察必须保持restart_allowed=false与arbitrary_shell=false",
+    "REPO-014提交e94c4f608fb05712586aacdc37b88b6a783a1558必须以精确授权、资源和回滚检查点绑定完成一次guanghu-ai-discovery.service重启并取得PASS_100服务器回执",
+    "一次性变更策略执行后必须销毁；常驻控制器继续保持restart_allowed=false",
     "服务健康不等于人格团队握手；团队成员继续分别验收"
   ],
   "rollback": [
@@ -131,5 +133,5 @@
     "保留追加式运行状态作为失败证据，不删除旧人格记录",
     "删除bingshuo-tcs服务账户前必须另行核对状态目录与审计需求"
   ],
-  "status": "ARCHITECTURE_PACKAGE_READY · INITIAL_PROVISION_PENDING"
+  "status": "DEPLOYED_RUNNING_COMPANION · STAGE_B_BOUNDED_RESTART_PROVEN"
 }