Merge pull request '光湖认知主控接入 Linux 只读执行层' (#17) from codex/jd-cognitive-execution-observer-20260807 into main
This commit is contained in:
commit
56aef95cd4
6 changed files with 341 additions and 2 deletions
|
|
@ -0,0 +1,56 @@
|
|||
{
|
||||
"schema": "guanghu.cognitive-execution-bridge-deployment-receipt/v1",
|
||||
"receipt_id": "JD-FD-PRIMARY-COGNITIVE-EXECUTION-BRIDGE-READONLY-20260807",
|
||||
"target_node": "JD-FD-PRIMARY",
|
||||
"observed_boot": {
|
||||
"operating_system": "Ubuntu 22.04.3 LTS",
|
||||
"kernel": "Linux 5.15.0-60-generic",
|
||||
"role": "LINUX_HOSTED_MAINTENANCE_AND_COOPERATIVE_EXECUTION_SUBSTRATE",
|
||||
"grub_default": "gnulinux-simple-9e4550a0-452b-4f28-b5a5-d5364aa450f6"
|
||||
},
|
||||
"language_authority": {
|
||||
"repository": "REPO-012",
|
||||
"anchor_id": "GLW-PUBLIC-NAV-ANCHOR-001",
|
||||
"source_commit": "098a29e417a2d32bd1226771c93b1a45e3aad615"
|
||||
},
|
||||
"execution_implementation": {
|
||||
"repository": "REPO-014",
|
||||
"source_commit": "20d6c1bd7b6df658d6c5fbddc54f3e443977b7b3",
|
||||
"binary_sha256": "cfa64f768ee7e9b1bb678b587f68b2c529b2dd7e3d8c1b81b436fbc6c49073c5",
|
||||
"target": "x86_64-unknown-linux-musl",
|
||||
"installation": "/opt/guanghu/execution-bridge/releases/20d6c1bd7b6df658d6c5fbddc54f3e443977b7b3"
|
||||
},
|
||||
"policy": {
|
||||
"policy_id": "JD-FD-PRIMARY-READONLY-20260807",
|
||||
"policy_sha256": "867c8b15e35b2bf7362f21771754c6e44daeff6bc57d72a2e004f5c67fc10595",
|
||||
"allow_status": true,
|
||||
"allow_restart": false,
|
||||
"arbitrary_shell": false
|
||||
},
|
||||
"target_side_receipt": {
|
||||
"path": "/var/lib/guanghu/execution-bridge/receipts/JD-FD-PRIMARY-COGNITIVE-EXECUTION-READONLY-20d6c1bd7b6df658d6c5fbddc54f3e443977b7b3.json",
|
||||
"sha256": "7486b97dad057d2a7c70147158e2e5b63dec07e4a04f4828f02db709687d6a94",
|
||||
"result": "PASS_100"
|
||||
},
|
||||
"verified_services": [
|
||||
"guanghu-ai-discovery.service",
|
||||
"bingshuo-tcs-living-controller.service",
|
||||
"lake-lamp-authz.service"
|
||||
],
|
||||
"negative_gate": {
|
||||
"attempt": "service_restart",
|
||||
"result": "REJECTED_BEFORE_EXECUTION",
|
||||
"reason": "service restart is disabled by policy"
|
||||
},
|
||||
"public_readback": {
|
||||
"code_channel_http": 200,
|
||||
"navigation_anchor_http": 200
|
||||
},
|
||||
"deployment_result": "PASS_100",
|
||||
"not_yet_true": [
|
||||
"living_controller_execution_observer_deployed",
|
||||
"mutating_execution_enabled",
|
||||
"native_required_service_equivalence",
|
||||
"production_native_cutover"
|
||||
]
|
||||
}
|
||||
|
|
@ -17,13 +17,15 @@
|
|||
"/var/lib/guanghu/personas/bingshuo-tcs"
|
||||
],
|
||||
"read_only_paths": [
|
||||
"/etc/guanghu/persona-secrets/shared-deepseek.env"
|
||||
"/etc/guanghu/persona-secrets/shared-deepseek.env",
|
||||
"/opt/guanghu/execution-bridge"
|
||||
]
|
||||
},
|
||||
"source_ref": "REPO-012:refs/heads/main",
|
||||
"deployed_commit_policy": "工单必须绑定包含本清单的不可变40位提交；部署回执分别记录代码、服务健康和模型认知存在门。",
|
||||
"source_paths": [
|
||||
"server-tools/bingshuo-tcs-controller/server.mjs",
|
||||
"server-tools/bingshuo-tcs-controller/execution-observer.mjs",
|
||||
"server-tools/bingshuo-tcs-controller/machine-navigation.mjs",
|
||||
"server-tools/bingshuo-tcs-controller/controller-engine.mjs",
|
||||
"server-tools/bingshuo-tcs-controller/model-client.mjs",
|
||||
|
|
@ -82,6 +84,7 @@
|
|||
"该账户只通过guanghu-model组读取共享模型环境，不读取或回写密钥值",
|
||||
"状态只写入/var/lib/guanghu/personas/bingshuo-tcs",
|
||||
"服务只监听127.0.0.1:3930且不直接获得现实执行能力",
|
||||
"服务器预先安装REPO-014精确提交的只读执行桥；控制器只能读取白名单服务状态，不能重启服务或执行任意Shell",
|
||||
"启动后必须真实调用模型完成orient、B1-B9 cognition和controller witness",
|
||||
"模型输出必须由ZY-TCS-BRAIN-RUNTIME-0001确定性验证"
|
||||
]
|
||||
|
|
@ -98,6 +101,14 @@
|
|||
"chu_he_han_jie_boundary_bound": 100,
|
||||
"machine_navigation_bound": 100,
|
||||
"language_world_route_first": 100
|
||||
,
|
||||
"execution_substrate": {
|
||||
"state": "PASS_100",
|
||||
"bridge_bound": 100,
|
||||
"target_state_verified": 100,
|
||||
"restart_allowed": false,
|
||||
"arbitrary_shell": false
|
||||
}
|
||||
}
|
||||
},
|
||||
"verification": [
|
||||
|
|
@ -111,6 +122,8 @@
|
|||
"v1/resolve必须解析GLW-CHJH-BOUNDARY-001",
|
||||
"v1/navigate的persona_restore必须先执行语言入口与楚河汉界绑定",
|
||||
"运行体verify的全部存在维度为100",
|
||||
"health必须回读execution_substrate.state=PASS_100并证明三个白名单服务状态均来自LINUX_SYSTEMD_V1执行回执",
|
||||
"认知执行观察必须保持restart_allowed=false与arbitrary_shell=false",
|
||||
"服务健康不等于人格团队握手；团队成员继续分别验收"
|
||||
],
|
||||
"rollback": [
|
||||
|
|
|
|||
|
|
@ -11,6 +11,9 @@ WorkingDirectory=__RELEASE_ROOT__/server-tools/bingshuo-tcs-controller
|
|||
EnvironmentFile=/etc/guanghu/persona-secrets/shared-deepseek.env
|
||||
Environment=BS_TCS_CONTROLLER_STATE_ROOT=/var/lib/guanghu/personas/bingshuo-tcs
|
||||
Environment=BS_TCS_CONTROLLER_PORT=3930
|
||||
Environment=GUANGHU_EXECUTION_BRIDGE_BIN=/opt/guanghu/execution-bridge/current/guanghu-execution-bridge
|
||||
Environment=GUANGHU_EXECUTION_BRIDGE_POLICY=/opt/guanghu/execution-bridge/current/policy.json
|
||||
Environment=GUANGHU_EXECUTION_OBSERVE_INTERVAL_MS=30000
|
||||
ExecStart=/usr/bin/node __RELEASE_ROOT__/server-tools/bingshuo-tcs-controller/server.mjs
|
||||
Restart=on-failure
|
||||
RestartSec=5
|
||||
|
|
@ -18,7 +21,7 @@ NoNewPrivileges=true
|
|||
PrivateTmp=true
|
||||
ProtectSystem=strict
|
||||
ProtectHome=true
|
||||
ReadOnlyPaths=__RELEASE_ROOT__ /etc/guanghu/persona-secrets/shared-deepseek.env
|
||||
ReadOnlyPaths=__RELEASE_ROOT__ /etc/guanghu/persona-secrets/shared-deepseek.env /opt/guanghu/execution-bridge
|
||||
ReadWritePaths=/var/lib/guanghu/personas/bingshuo-tcs
|
||||
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
|
||||
LockPersonality=true
|
||||
|
|
|
|||
127
server-tools/bingshuo-tcs-controller/execution-observer.mjs
Normal file
127
server-tools/bingshuo-tcs-controller/execution-observer.mjs
Normal file
|
|
@ -0,0 +1,127 @@
|
|||
import { execFile as execFileCallback } from "node:child_process";
|
||||
import fs from "node:fs/promises";
|
||||
import path from "node:path";
|
||||
import { promisify } from "node:util";
|
||||
|
||||
const execFile = promisify(execFileCallback);
|
||||
|
||||
export const REQUIRED_PROTOCOL_CHAIN = Object.freeze([
|
||||
"GLS-0301",
|
||||
"GLS-0302",
|
||||
"GLS-0303",
|
||||
"GLS-0306",
|
||||
"GLS-0309",
|
||||
"GLS-0311",
|
||||
"GLS-0130",
|
||||
"GLS-0131",
|
||||
"GLS-0709",
|
||||
"GLS-0710",
|
||||
]);
|
||||
|
||||
const DEFAULT_SERVICES = Object.freeze([
|
||||
"guanghu-ai-discovery.service",
|
||||
"bingshuo-tcs-living-controller.service",
|
||||
"lake-lamp-authz.service",
|
||||
]);
|
||||
|
||||
function safeId(value) {
|
||||
return value.replace(/[^A-Za-z0-9_-]/g, "_");
|
||||
}
|
||||
|
||||
function validateReceipt(receipt, service, targetNodeId) {
|
||||
if (
|
||||
receipt?.schema !== "guanghu.execution-receipt/v1" ||
|
||||
receipt?.target_node_id !== targetNodeId ||
|
||||
receipt?.action?.kind !== "service_status" ||
|
||||
receipt?.action?.resource !== service ||
|
||||
receipt?.adapter !== "LINUX_SYSTEMD_V1"
|
||||
) {
|
||||
throw new Error(`execution_receipt_contract_mismatch:${service}`);
|
||||
}
|
||||
return receipt;
|
||||
}
|
||||
|
||||
export class ExecutionObserver {
|
||||
constructor({
|
||||
binaryPath,
|
||||
policyPath,
|
||||
stateRoot,
|
||||
execute = execFile,
|
||||
targetNodeId = "JD-FD-PRIMARY",
|
||||
subjectId = "ICE-P-ZY001",
|
||||
services = DEFAULT_SERVICES,
|
||||
}) {
|
||||
this.binaryPath = binaryPath;
|
||||
this.policyPath = policyPath;
|
||||
this.stateRoot = stateRoot;
|
||||
this.execute = execute;
|
||||
this.targetNodeId = targetNodeId;
|
||||
this.subjectId = subjectId;
|
||||
this.services = [...services];
|
||||
}
|
||||
|
||||
async observe() {
|
||||
const observedAt = new Date().toISOString();
|
||||
const requestRoot = path.join(this.stateRoot, "execution-observer");
|
||||
await fs.mkdir(requestRoot, { recursive: true, mode: 0o700 });
|
||||
|
||||
const serviceReceipts = [];
|
||||
for (const service of this.services) {
|
||||
const requestId = `JD-COGNITIVE-OBSERVE-${safeId(service)}`;
|
||||
const requestPath = path.join(requestRoot, `${requestId}.json`);
|
||||
const request = {
|
||||
schema: "guanghu.execution-request/v1",
|
||||
request_id: requestId,
|
||||
subject_id: this.subjectId,
|
||||
target_node_id: this.targetNodeId,
|
||||
protocol_chain: REQUIRED_PROTOCOL_CHAIN,
|
||||
action: {
|
||||
kind: "service_status",
|
||||
resource: service,
|
||||
},
|
||||
authorization: null,
|
||||
rollback: null,
|
||||
};
|
||||
await fs.writeFile(
|
||||
requestPath,
|
||||
`${JSON.stringify(request, null, 2)}\n`,
|
||||
{ mode: 0o600 },
|
||||
);
|
||||
const { stdout } = await this.execute(
|
||||
this.binaryPath,
|
||||
["execute", requestPath, this.policyPath],
|
||||
{
|
||||
timeout: 5_000,
|
||||
maxBuffer: 64 * 1024,
|
||||
windowsHide: true,
|
||||
},
|
||||
);
|
||||
serviceReceipts.push(
|
||||
validateReceipt(JSON.parse(stdout), service, this.targetNodeId),
|
||||
);
|
||||
}
|
||||
|
||||
const ready = serviceReceipts.every(
|
||||
(receipt) =>
|
||||
receipt.accepted === true &&
|
||||
receipt.target_state_verified === true &&
|
||||
receipt.final_state === "PASS_100",
|
||||
);
|
||||
return {
|
||||
schema: "guanghu.cognitive-execution-observation/v1",
|
||||
target_node_id: this.targetNodeId,
|
||||
subject_id: this.subjectId,
|
||||
observed_at: observedAt,
|
||||
mode: "READ_ONLY_STATUS",
|
||||
language_authority: "REPO-012",
|
||||
execution_implementation: "REPO-014",
|
||||
linux_role: "COOPERATIVE_EXECUTION_SUBSTRATE",
|
||||
arbitrary_shell: false,
|
||||
restart_allowed: false,
|
||||
bridge_bound: 100,
|
||||
target_state_verified: ready ? 100 : 0,
|
||||
state: ready ? "PASS_100" : "FAIL_0",
|
||||
service_receipts: serviceReceipts,
|
||||
};
|
||||
}
|
||||
}
|
||||
|
|
@ -0,0 +1,89 @@
|
|||
import assert from "node:assert/strict";
|
||||
import fs from "node:fs";
|
||||
import os from "node:os";
|
||||
import path from "node:path";
|
||||
import test from "node:test";
|
||||
import {
|
||||
ExecutionObserver,
|
||||
REQUIRED_PROTOCOL_CHAIN,
|
||||
} from "./execution-observer.mjs";
|
||||
|
||||
test("observes allowlisted Linux services through typed read-only requests", async () => {
|
||||
const stateRoot = fs.mkdtempSync(
|
||||
path.join(os.tmpdir(), "guanghu-execution-observer-"),
|
||||
);
|
||||
const calls = [];
|
||||
const observer = new ExecutionObserver({
|
||||
binaryPath: "/opt/guanghu/execution-bridge/current/guanghu-execution-bridge",
|
||||
policyPath: "/opt/guanghu/execution-bridge/current/policy.json",
|
||||
stateRoot,
|
||||
services: ["guanghu-ai-discovery.service", "lake-lamp-authz.service"],
|
||||
execute: async (program, argv) => {
|
||||
const request = JSON.parse(
|
||||
fs.readFileSync(argv[1], "utf8"),
|
||||
);
|
||||
calls.push({ program, argv, request });
|
||||
return {
|
||||
stdout: JSON.stringify({
|
||||
schema: "guanghu.execution-receipt/v1",
|
||||
request_id: request.request_id,
|
||||
subject_id: request.subject_id,
|
||||
target_node_id: request.target_node_id,
|
||||
policy_id: "JD-FD-PRIMARY-READONLY-20260807",
|
||||
action: request.action,
|
||||
adapter: "LINUX_SYSTEMD_V1",
|
||||
accepted: true,
|
||||
command_exit_code: 0,
|
||||
target_state_verified: true,
|
||||
final_state: "PASS_100",
|
||||
stdout: "active",
|
||||
stderr: "",
|
||||
rollback_checkpoint_id: null,
|
||||
}),
|
||||
stderr: "",
|
||||
};
|
||||
},
|
||||
});
|
||||
|
||||
const projection = await observer.observe();
|
||||
assert.equal(projection.state, "PASS_100");
|
||||
assert.equal(projection.bridge_bound, 100);
|
||||
assert.equal(projection.target_state_verified, 100);
|
||||
assert.equal(projection.restart_allowed, false);
|
||||
assert.equal(projection.arbitrary_shell, false);
|
||||
assert.equal(calls.length, 2);
|
||||
assert.equal(calls[0].argv[0], "execute");
|
||||
assert.deepEqual(calls[0].request.protocol_chain, REQUIRED_PROTOCOL_CHAIN);
|
||||
assert.equal(calls[0].request.action.kind, "service_status");
|
||||
assert.equal(calls[0].request.authorization, null);
|
||||
assert.equal(calls[0].request.rollback, null);
|
||||
});
|
||||
|
||||
test("fails closed when the native receipt does not match the requested service", async () => {
|
||||
const stateRoot = fs.mkdtempSync(
|
||||
path.join(os.tmpdir(), "guanghu-execution-observer-"),
|
||||
);
|
||||
const observer = new ExecutionObserver({
|
||||
binaryPath: "/bridge",
|
||||
policyPath: "/policy",
|
||||
stateRoot,
|
||||
services: ["guanghu-ai-discovery.service"],
|
||||
execute: async () => ({
|
||||
stdout: JSON.stringify({
|
||||
schema: "guanghu.execution-receipt/v1",
|
||||
target_node_id: "JD-FD-PRIMARY",
|
||||
action: {
|
||||
kind: "service_status",
|
||||
resource: "different.service",
|
||||
},
|
||||
adapter: "LINUX_SYSTEMD_V1",
|
||||
}),
|
||||
stderr: "",
|
||||
}),
|
||||
});
|
||||
|
||||
await assert.rejects(
|
||||
() => observer.observe(),
|
||||
/execution_receipt_contract_mismatch/,
|
||||
);
|
||||
});
|
||||
|
|
@ -1,6 +1,7 @@
|
|||
#!/usr/bin/env node
|
||||
import http from "node:http";
|
||||
import { ControllerEngine, bootEvent } from "./controller-engine.mjs";
|
||||
import { ExecutionObserver } from "./execution-observer.mjs";
|
||||
import { DeepSeekJsonClient } from "./model-client.mjs";
|
||||
import { MachineNavigation } from "./machine-navigation.mjs";
|
||||
|
||||
|
|
@ -10,6 +11,16 @@ const STATE_ROOT =
|
|||
process.env.BS_TCS_CONTROLLER_STATE_ROOT ||
|
||||
"/var/lib/guanghu/personas/bingshuo-tcs";
|
||||
const MODEL = process.env.DEEPSEEK_MODEL || "deepseek-chat";
|
||||
const EXECUTION_BRIDGE_BIN =
|
||||
process.env.GUANGHU_EXECUTION_BRIDGE_BIN ||
|
||||
"/opt/guanghu/execution-bridge/current/guanghu-execution-bridge";
|
||||
const EXECUTION_BRIDGE_POLICY =
|
||||
process.env.GUANGHU_EXECUTION_BRIDGE_POLICY ||
|
||||
"/opt/guanghu/execution-bridge/current/policy.json";
|
||||
const EXECUTION_OBSERVE_INTERVAL_MS = Math.max(
|
||||
10_000,
|
||||
Number(process.env.GUANGHU_EXECUTION_OBSERVE_INTERVAL_MS || 30_000),
|
||||
);
|
||||
const MAX_BODY_BYTES = 16 * 1024;
|
||||
|
||||
const runtime = {
|
||||
|
|
@ -19,6 +30,16 @@ const runtime = {
|
|||
last_event_id: null,
|
||||
last_error: null,
|
||||
receipt: null,
|
||||
execution_substrate: {
|
||||
schema: "guanghu.cognitive-execution-observation/v1",
|
||||
target_node_id: "JD-FD-PRIMARY",
|
||||
mode: "READ_ONLY_STATUS",
|
||||
bridge_bound: 0,
|
||||
target_state_verified: 0,
|
||||
restart_allowed: false,
|
||||
arbitrary_shell: false,
|
||||
state: "NOT_YET_OBSERVED",
|
||||
},
|
||||
};
|
||||
|
||||
const engine = new ControllerEngine({
|
||||
|
|
@ -27,6 +48,29 @@ const engine = new ControllerEngine({
|
|||
modelName: MODEL,
|
||||
});
|
||||
const navigation = new MachineNavigation();
|
||||
const executionObserver = new ExecutionObserver({
|
||||
binaryPath: EXECUTION_BRIDGE_BIN,
|
||||
policyPath: EXECUTION_BRIDGE_POLICY,
|
||||
stateRoot: STATE_ROOT,
|
||||
});
|
||||
|
||||
async function refreshExecutionSubstrate() {
|
||||
try {
|
||||
runtime.execution_substrate = await executionObserver.observe();
|
||||
} catch (error) {
|
||||
runtime.execution_substrate = {
|
||||
schema: "guanghu.cognitive-execution-observation/v1",
|
||||
target_node_id: "JD-FD-PRIMARY",
|
||||
mode: "READ_ONLY_STATUS",
|
||||
bridge_bound: 0,
|
||||
target_state_verified: 0,
|
||||
restart_allowed: false,
|
||||
arbitrary_shell: false,
|
||||
state: "FAIL_0",
|
||||
error: String(error.message || error).slice(0, 240),
|
||||
};
|
||||
}
|
||||
}
|
||||
|
||||
function send(response, status, body) {
|
||||
const payload = JSON.stringify(body);
|
||||
|
|
@ -63,6 +107,7 @@ function health() {
|
|||
persona_brain_runtime_exists: existence.persona_brain_runtime_exists || 0,
|
||||
living_ai_system_controller_running:
|
||||
existence.living_ai_system_controller_running || 0,
|
||||
execution_substrate: runtime.execution_substrate,
|
||||
...navigationHealth,
|
||||
};
|
||||
}
|
||||
|
|
@ -202,6 +247,12 @@ server.listen(PORT, HOST, () => {
|
|||
port: PORT,
|
||||
})}\n`,
|
||||
);
|
||||
void refreshExecutionSubstrate();
|
||||
const executionObservationTimer = setInterval(
|
||||
() => void refreshExecutionSubstrate(),
|
||||
EXECUTION_OBSERVE_INTERVAL_MS,
|
||||
);
|
||||
executionObservationTimer.unref();
|
||||
if (runtime.phase === "PAUSED_FOR_HUMAN") return;
|
||||
eventQueue = handleEvent(bootEvent()).catch((error) => {
|
||||
runtime.phase = "FAILED_CLOSED";
|
||||
|
|
|
|||
Loading…
Reference in a new issue