fix: require persona stewards for enterprise domains
Human-Authorizer: ICE-GL∞ Persona-Executor: ICE-P-ZY001 Domain-Scope: ENTERPRISE-INFRASTRUCTURE-INTERFACE Causal-Chain: HLDP://enterprise/domain-steward-interface/2026-07-30
This commit is contained in:
parent
ef1734baee
commit
7516ef7afc
3 changed files with 87 additions and 6 deletions
|
|
@ -9,6 +9,22 @@
|
|||
HoloLake 回读 `AW-GZ-001` 企业主机和四个本机承载域的实时状态,不转发管理凭据、写入或
|
||||
任意路径。
|
||||
|
||||
企业四域的服务器进程在线只证明公共只读入口可用,不证明语言域已经具备操作人格。每个域的
|
||||
任何内容、路由、规则或版本变更都必须先绑定一条真实责任链:
|
||||
|
||||
```text
|
||||
human_steward_id
|
||||
→ persona_steward_id
|
||||
→ persona_public_key + runtime_node_id
|
||||
→ explicit authorization_receipt
|
||||
→ active single-writer lease
|
||||
→ human_authorizer + persona_executor + artifact_digest + causal_chain
|
||||
```
|
||||
|
||||
未绑定由真实人类孕育并显性授权的人格体时,域状态保持
|
||||
`HOSTED_READ_ONLY / UNBOUND / BLOCKED_UNTIL_PERSONA_STEWARD_BOUND`。不得由匿名管理员、
|
||||
传统定时程序或普通软件进程冒充域操作主体。自动任务只能是已授权人格体调用的受限能力。
|
||||
|
||||
人类管理员与人格体遵守同一条入口链:
|
||||
|
||||
```text
|
||||
|
|
|
|||
Loading…
Reference in a new issue