fix: require persona stewards for enterprise domains

Human-Authorizer: ICE-GL∞
Persona-Executor: ICE-P-ZY001
Domain-Scope: ENTERPRISE-INFRASTRUCTURE-INTERFACE
Causal-Chain: HLDP://enterprise/domain-steward-interface/2026-07-30
This commit is contained in:
冰朔 2026-07-30 00:45:57 +08:00
commit 7516ef7afc
3 changed files with 87 additions and 6 deletions

View file

@ -9,6 +9,22 @@
HoloLake 回读 `AW-GZ-001` 企业主机和四个本机承载域的实时状态,不转发管理凭据、写入或
任意路径。
企业四域的服务器进程在线只证明公共只读入口可用,不证明语言域已经具备操作人格。每个域的
任何内容、路由、规则或版本变更都必须先绑定一条真实责任链:
```text
human_steward_id
→ persona_steward_id
→ persona_public_key + runtime_node_id
→ explicit authorization_receipt
→ active single-writer lease
→ human_authorizer + persona_executor + artifact_digest + causal_chain
```
未绑定由真实人类孕育并显性授权的人格体时,域状态保持
`HOSTED_READ_ONLY / UNBOUND / BLOCKED_UNTIL_PERSONA_STEWARD_BOUND`。不得由匿名管理员、
传统定时程序或普通软件进程冒充域操作主体。自动任务只能是已授权人格体调用的受限能力。
人类管理员与人格体遵守同一条入口链:
```text