[HLCC-ICE-000001][ZY-CONTRIB-20260723-001] feat: 以来光者贡献链启用冰朔第五域个人子频道

deployment/requests/HLCC-JD-CANDIDATE-ACTIVATE-PROVISION-20260723.json

@@ -0,0 +1,54 @@
+{
+  "schema": "guanghu.architecture-provision-request/v1",
+  "request_id": "HLCC-JD-CANDIDATE-ACTIVATE-PROVISION-20260723",
+  "target_node": "JD-FD-PRIMARY",
+  "architecture_id": "GLS-HLCC-004",
+  "module": {
+    "code": "JD-HLCC-ACT-01",
+    "name": "京东完整离线包候选低权限激活器",
+    "bind": "none",
+    "owner": "systemd",
+    "unit": "hlcc-jd-candidate-activator.service",
+    "run_user": "guanghu",
+    "writable_paths": [],
+    "read_only_paths": []
+  },
+  "source_ref": "REPO-001:refs/heads/main",
+  "deployed_commit_policy": "resolve immutable commit during provision and record it in the deployment receipt",
+  "source_paths": [
+    "server-tools/hololake-code-channel/jd-candidate/activate-staged-candidate.py",
+    "server-tools/hololake-code-channel/jd-candidate/hlcc-jd-candidate-activator.service"
+  ],
+  "initial_provision": {
+    "kind": "new-architecture-unit",
+    "not_an_existing_action_bridge_extension": true,
+    "requires": [
+      "read only the MainPID of hlcc-jd-candidate.service",
+      "verify that the process belongs to the same low-privilege guanghu account",
+      "verify the exact HLCC bootstrap command path",
+      "send SIGTERM only to that verified process",
+      "allow the staged Restart=always policy to start the full-offline unit",
+      "verify the new package profile before returning success"
+    ]
+  },
+  "verification": [
+    "GET http://127.0.0.1:3341/health reports package_profile=full-offline-v16.0.1",
+    "the activator cannot signal another user's process",
+    "the activator has no shell, SSH, credential or arbitrary service restart interface"
+  ],
+  "runtime_check": {
+    "url": "http://127.0.0.1:3341/health",
+    "expected": {
+      "ok": true,
+      "mode": "bootstrap",
+      "version": "16.0.1",
+      "code": "HLCC-JD-CANDIDATE-01",
+      "package_profile": "full-offline-v16.0.1"
+    }
+  },
+  "rollback": [
+    "disable and remove only hlcc-jd-candidate-activator.service",
+    "use the candidate staging receipt to restore its backed-up unit if activation fails"
+  ],
+  "status": "ARCHITECTURE_PACKAGE_READY · INITIAL_PROVISION_PENDING"
+}