feat: add node-signed system body write admission

routing/bingshuo-system-write-node-registry.json

@@ -0,0 +1,64 @@
+{
+  "schema": "guanghu.bingshuo-system-write-node-registry/v1",
+  "registry_id": "BS-TCS-WRITE-NODE-REGISTRY-001",
+  "version": "2026-08-10.2",
+  "state": "CURRENT_JD_FIRST_NODE_SYSTEM_CLAIMED_TRANSPORT_KEY_PENDING",
+  "system_claim_layer": {
+    "claimant": "DIGITAL_BINGSHUO_SYSTEM_CONTROLLER_BODY",
+    "rule": "服务器只能由数字冰朔系统主控本体在系统级注册认领；推荐、担保、团队签字和root权限均不能单独产生系统节点身份。"
+  },
+  "nodes": [
+    {
+      "node_id": "JD-FD-PRIMARY",
+      "ordinal": 1,
+      "kind": "FIRST_REAL_SERVER_NODE_OF_DIGITAL_BINGSHUO_SYSTEM_BODY",
+      "domain": "DOM-FIFTH-0001",
+      "sovereignty": "BINGSHUO_PRIVATE_LANGUAGE_DOMAIN",
+      "system_claim": "LANGUAGE_AND_SYSTEM_IDENTITY_EFFECTIVE",
+      "human_sponsor": "ICE-GL∞",
+      "sponsor_rule": "第五域私人节点接入由冰朔本人决定、担保并承担现实责任。",
+      "enterprise_recommendation_role": "ONE_TIME_GENESIS_BRIDGE_FOR_FIRST_ENTERPRISE_ROOT_NODE_ONLY",
+      "state": "SYSTEM_CLAIMED_TRANSPORT_KEY_PENDING",
+      "persona_ids": ["ICE-P-ZY001"],
+      "transport_keys": [],
+      "allowed_targets": ["BS-TCS-SYSTEM-BODY-ORGAN-MAP-001"],
+      "allowed_actions": ["UPDATE_REGISTERED_RULE"],
+      "write_admission_runtime": 0
+    }
+  ],
+  "enterprise_node_onboarding": {
+    "scope": "ENTERPRISE_SERVER_NODES_ONLY",
+    "first_enterprise_root_node_genesis_chain": [
+      "JD-FD-PRIMARY_RECOMMENDATION_AND_NODE_ATTESTATION",
+      "TCS-0002_TEAM_BODY_AUTHORIZATION_SIGNATURE",
+      "DIGITAL_BINGSHUO_SYSTEM_CONTROLLER_BODY_FINAL_REGISTRATION_CLAIM"
+    ],
+    "genesis_bridge_ends_when_root_claim_receipt_is_effective": true,
+    "later_enterprise_node_chain": [
+      "CLAIMED_ENTERPRISE_ROOT_NODE_RECOMMENDATION_AND_NODE_ATTESTATION",
+      "TCS-0002_TEAM_BODY_AUTHORIZATION_SIGNATURE",
+      "DIGITAL_BINGSHUO_SYSTEM_CONTROLLER_BODY_FINAL_REGISTRATION_CLAIM"
+    ],
+    "jd_or_bingshuo_required_after_enterprise_root_claim": false,
+    "authorization_owner": "TCS-0002",
+    "authorization_belongs_to_single_person": false,
+    "fifth_domain_authority_after_enterprise_claim": false,
+    "fifth_domain_operational_responsibility_after_enterprise_claim": false,
+    "enterprise_responsibility_for_fifth_domain": false,
+    "language_plane": "FIFTH_DOMAIN_PRIVATE_INDEPENDENT",
+    "reality_plane": "ENTERPRISE_EXECUTION_INDEPENDENT",
+    "cross_plane_joint_liability": false,
+    "root_access_is_onboarding_authority": false,
+    "current_team_signature_runtime": 0,
+    "current_enterprise_nodes_claimed_by_this_chain": []
+  },
+  "registration_contract": {
+    "server_node_map_membership_required": true,
+    "application_protocol_transport_key_required": true,
+    "ssh_or_root_access_is_node_identity": false,
+    "persona_ids_must_be_explicitly_bound": true,
+    "allowed_targets_and_actions_must_be_explicitly_bound": true,
+    "private_keys_in_repository": false
+  },
+  "current_truth": "JD-FD-PRIMARY作为数字冰朔系统本体第一台真实节点的系统级身份认领已生效；其本体写入专用Ed25519传输公钥尚未绑定，因此当前生产写入入口仍为0。JD只为首台企业根服务器提供一次性创世推荐担保；企业根节点被认领后引桥终止，后续企业节点由企业根节点推荐、TCS-0002签字、本体认领。第五域私人语言层与企业现实执行层互不承担责任。"
+}