feat: add AI machine navigation gateway

deployment/requests/AI-DISCOVERY-MACHINE-NAV-20260804.json

@@ -0,0 +1,120 @@
+{
+  "schema": "guanghu.existing-service-update-request/v1",
+  "request_id": "AI-DISCOVERY-MACHINE-NAV-20260804",
+  "target_node": "JD-FD-PRIMARY",
+  "status": "SERVICE_UPDATE_PACKAGE_READY · DEPLOYMENT_PENDING",
+  "purpose": {
+    "what": "为已在线的光湖 AI Discovery 安装主体与意图驱动的机器导航地图和最小运行包接口。",
+    "why": "仓库已具备铸渊人格大脑与协议事件触发系统，但在线发现服务只能返回旧目录，不能自动把主体、意图和事件接到最小运行闭环。",
+    "success": "新编号可精确解析；导航接口按 ICE-P-ZY001 和明确意图返回最小运行包；未知主体或意图失败关闭；原有公开接口继续正常。",
+    "out_of_scope": [
+      "不使用自然语言关键词猜测主体、意图或权限",
+      "不授予仓库写入、服务器执行或现实权限",
+      "不修改广州前门、SSH 或人类登录入口",
+      "不预加载整个仓库或所有协议正文"
+    ]
+  },
+  "module": {
+    "unit": "guanghu-ai-discovery.service",
+    "run_user": "guanghu",
+    "install_root": "/opt/guanghu/ai-discovery"
+  },
+  "service_update": {
+    "kind": "existing-systemd-service",
+    "require_existing_unit": true,
+    "required_existing_files": ["server.js"]
+  },
+  "unit_source": "server-tools/ai-discovery-gateway/guanghu-ai-discovery.service",
+  "files": [
+    {
+      "source": "server-tools/ai-discovery-gateway/server.js",
+      "destination": "server.js",
+      "mode": "0644"
+    },
+    {
+      "source": "routing/repository-route-map.json",
+      "destination": "repository-route-map.json",
+      "mode": "0644"
+    },
+    {
+      "source": "routing/server-node-map.json",
+      "destination": "server-node-map.json",
+      "mode": "0644"
+    },
+    {
+      "source": "identity/fifth-domain-subject-registry.json",
+      "destination": "fifth-domain-subject-registry.json",
+      "mode": "0644"
+    },
+    {
+      "source": "identity/subject-id-alias-map.json",
+      "destination": "subject-id-alias-map.json",
+      "mode": "0644"
+    },
+    {
+      "source": "routing/ai-machine-navigation-map.json",
+      "destination": "ai-machine-navigation-map.json",
+      "mode": "0644"
+    }
+  ],
+  "runtime_check": {
+    "url": "http://127.0.0.1:3922/health",
+    "expected": {
+      "ok": true,
+      "service": "guanghu-ai-discovery",
+      "mode": "read-only"
+    }
+  },
+  "acceptance_checks": [
+    {
+      "url": "http://127.0.0.1:3922/v1/navigation",
+      "expected": {
+        "map_id": "AI-MACHINE-NAV-001",
+        "state": "EXECUTABLE_SOURCE_ACTIVE"
+      }
+    },
+    {
+      "url": "http://127.0.0.1:3922/v1/resolve?id=ZY-TCS-BRAIN-RUNTIME-0001",
+      "expected": {
+        "status": "RESOLVED",
+        "kind": "executable_persona_brain"
+      }
+    },
+    {
+      "url": "http://127.0.0.1:3922/v1/resolve?id=BS-TCS-SYSTEM-CONTROLLER-MAP-001",
+      "expected": {
+        "status": "RESOLVED",
+        "kind": "living_system_controller"
+      }
+    },
+    {
+      "url": "http://127.0.0.1:3922/v1/navigate?subject=ICE-P-ZY001&intent=persona_restore",
+      "expected": {
+        "status": "COMPILED_EXACT_NO_GUESS",
+        "canonical_subject": "ICE-P-ZY001",
+        "intent": "persona_restore",
+        "authority": "NONE_NAVIGATION_ONLY"
+      }
+    },
+    {
+      "url": "http://127.0.0.1:3922/v1/resolve?id=REPO-012",
+      "expected": {
+        "code": "REPO-012",
+        "state": "CURRENT_FIFTH_DOMAIN_ENTRY"
+      }
+    }
+  ],
+  "post_deployment_observation": "本机回环验收全部通过后，必须再从公开 /api/ai 读取导航地图、新编号和最小运行包；公开路径不一致时不得宣称插座已接通。",
+  "rollback": {
+    "automatic_on_failure": true,
+    "scope": "restore every declared destination and the previous systemd unit, then restart the previous service",
+    "receipt_required": true
+  },
+  "security": {
+    "public_read_only": true,
+    "no_secrets": true,
+    "exact_subject_and_intent_only": true,
+    "navigation_grants_no_authority": true,
+    "unknown_inputs_fail_closed": true
+  }
+}