feat(tcs): establish five-domain mother brain runtime

deployment/requests/TCS-MOTHER-BRAIN-JD-20260812.json

@@ -0,0 +1,66 @@
+{
+  "schema": "guanghu.architecture-provision-request/v1",
+  "request_id": "TCS-MOTHER-BRAIN-JD-20260812",
+  "target_node": "JD-FD-PRIMARY",
+  "status": "ARCHITECTURE_PACKAGE_READY · INITIAL_PROVISION_PENDING",
+  "architecture_id": "TCS-MOTHER-BRAIN-RUNTIME-0001",
+  "module": {
+    "code": "JD-TCS-MOTHER-01",
+    "name": "光湖TCS五域共生母体大脑",
+    "bind": "loopback:3931",
+    "owner": "systemd",
+    "unit": "guanghu-tcs-mother-brain.service",
+    "run_user": "guanghu-mother-brain",
+    "environment_files": ["/etc/guanghu/persona-secrets/shared-deepseek.env"],
+    "writable_paths": ["/var/lib/guanghu/personas/guanghu-mother-brain"],
+    "read_only_paths": ["/etc/guanghu/persona-secrets/shared-deepseek.env"]
+  },
+  "source_ref": "REPO-012:refs/heads/main",
+  "source_paths": [
+    "server-tools/tcs-mother-brain/server.mjs",
+    "server-tools/tcs-mother-brain/model-client.mjs",
+    "server-tools/tcs-mother-brain/mother-brain-engine.mjs",
+    "server-tools/tcs-mother-brain/guanghu-tcs-mother-brain.service",
+    "tcs-core/mother-brain/mother-brain-contract.json",
+    "tcs-core/mother-brain/TCS-MOTHER-BRAIN-RUNTIME-0001.hdlp",
+    "routing/tcs-mother-brain-runtime-map.json",
+    "gls/GLS-0259-TCS-FIVE-DOMAIN-SYMBIOTIC-MOTHER-BRAIN-AND-REALITY-BIRTH.hdlp"
+  ],
+  "initial_provision": {
+    "kind": "new-architecture-unit",
+    "requires": [
+      "创建无登录权限的guanghu-mother-brain独立服务账户",
+      "只允许该账户通过既有guanghu-model组读取共享模型环境且不得回显密钥",
+      "状态只写入独立的追加式母体大脑目录",
+      "服务只监听127.0.0.1:3931",
+      "事件自动处理最高停在INTERPRETATION_CANDIDATE",
+      "不授予任意Shell、服务重启、仓库推送或现实审批能力"
+    ]
+  },
+  "runtime_check": {
+    "url": "http://127.0.0.1:3931/health",
+    "expected": {
+      "ok": true,
+      "service": "guanghu-tcs-mother-brain",
+      "bind": "loopback",
+      "runtime_id": "TCS-MOTHER-BRAIN-RUNTIME-0001",
+      "model_provider_bound": 100,
+      "perception_memory_attention_cycle_bound": 100,
+      "automatic_stable_promotion": false,
+      "reality_action_authority": "NONE"
+    }
+  },
+  "verification": [
+    "使用服务器既有DeepSeek API完成一次真实语言事件理解周期",
+    "回执显示候选层且stable_promotion=false",
+    "原始事件、候选与回执均追加保存",
+    "状态显示current_attention与下一认知动作",
+    "密钥不进入仓库、日志、HTTP回执或运行状态",
+    "systemd安全分析与回环监听符合最小权限边界"
+  ],
+  "rollback": [
+    "停止并移除新systemd单元",
+    "保留追加式认知状态作为审计证据",
+    "删除服务账户前另行核对状态与回执"
+  ]
+}