diff --git a/deployment/navigation-maps/XX-GZ-001.json b/deployment/navigation-maps/XX-GZ-001.json new file mode 100644 index 0000000..352b4a1 --- /dev/null +++ b/deployment/navigation-maps/XX-GZ-001.json @@ -0,0 +1,48 @@ +{ + "schema": "guanghu.navigation-map/v1", + "node_id": "XX-GZ-001", + "role": "小新教育行业节点 · 高中项目师训运营应用服务器", + "human_controller": "小新", + "upstream": "JD-FD-PRIMARY", + "fifth_domain_relation": "MEMBER_OWNED_APPLICATION_NODE_CONNECTED_BY_PROTOCOL", + "modules": [ + { + "code": "XX-EDU-01", + "name": "光湖高中项目师训运营工作空间", + "bind": "deployment-pending", + "owner": "guanghu/systemd", + "state": "REGISTERED_DEPLOYMENT_PENDING" + }, + { + "code": "XX-CC-01", + "name": "光湖代码频道候选数据面", + "bind": "loopback-only-until-explicit-cutover", + "owner": "guanghu/systemd", + "state": "REGISTERED_OFFLINE_PACKAGE_PENDING" + }, + { + "code": "XX-GATE-01", + "name": "光湖制品来源与更新权门禁", + "bind": "local-policy", + "owner": "root", + "state": "REGISTERED" + } + ], + "mandatory_order": [ + "verify-provider-instance-and-dmi", + "verify-pinned-ssh-host-key", + "read-navigation-map", + "verify-artifact-manifest", + "deploy-isolated-candidate", + "write-server-owned-receipt", + "verify-protocol-link-to-jd-fd-primary" + ], + "forbidden": [ + "application-source-on-server", + "open-source-upstream-auto-sync", + "open-source-updater", + "production-cutover-without-explicit-receipt", + "reuse-jd-fd-primary-identity-or-authority", + "private-key-on-server" + ] +} diff --git a/deployment/nodes/XX-GZ-001.json b/deployment/nodes/XX-GZ-001.json new file mode 100644 index 0000000..88ef06d --- /dev/null +++ b/deployment/nodes/XX-GZ-001.json @@ -0,0 +1,34 @@ +{ + "schema": "guanghu.managed-node/v1", + "node_id": "XX-GZ-001", + "display_name": "小新教育行业节点", + "owner": "小新", + "provider": "tencent_cloud", + "region": "guangzhou", + "roles": [ + "member-owned-application-node", + "high-school-teacher-training-workspace", + "guanghu-code-channel-candidate-data-plane" + ], + "upstream": "JD-FD-PRIMARY", + "connectivity": { + "admin_route": "local-private-registry-only", + "identity_gate": "provider-instance-plus-dmi-plus-pinned-ssh-host-key", + "credential_material": "private_only" + }, + "delivery_policy": { + "allowed": [ + "compiled-application-artifacts", + "verified-guanghu-code-channel-offline-package", + "protocol-configuration", + "server-owned-receipts" + ], + "forbidden": [ + "application-source-code", + "git-working-tree", + "open-source-upstream-sync", + "automatic-open-source-updates" + ] + }, + "status": "registered-deployment-pending" +} diff --git a/deployment/receipts/XX-GZ-001-LIGHTHOUSE-REGISTRATION-20260807.json b/deployment/receipts/XX-GZ-001-LIGHTHOUSE-REGISTRATION-20260807.json new file mode 100644 index 0000000..41f84d3 --- /dev/null +++ b/deployment/receipts/XX-GZ-001-LIGHTHOUSE-REGISTRATION-20260807.json @@ -0,0 +1,44 @@ +{ + "schema": "guanghu.node-registration-receipt/v1", + "receipt_id": "XX-GZ-001-LIGHTHOUSE-REGISTRATION-20260807", + "node_id": "XX-GZ-001", + "human_controller": "小新", + "region": "CN-GUANGZHOU", + "relation": "MEMBER_OWNED_APPLICATION_NODE_CONNECTED_TO_JD_FD_PRIMARY_BY_PROTOCOL", + "registered_surfaces": [ + "routing/server-node-map.json", + "routing/lighthouse-path-registry.json", + "deployment/navigation-maps/XX-GZ-001.json", + "deployment/nodes/XX-GZ-001.json" + ], + "privacy_boundary": { + "public_repository_contains": [ + "stable-node-id", + "human-controller-name", + "region", + "role", + "protocol-relation", + "source-and-update-policy" + ], + "public_repository_forbids": [ + "server-address", + "dmi-uuid", + "ssh-host-key", + "private-key", + "password", + "provider-credential" + ] + }, + "deployment_boundary": { + "application_source_on_server": false, + "open_source_upstream_sync": false, + "open_source_automatic_updates": false, + "allowed_delivery": [ + "compiled-application-artifacts", + "verified-guanghu-code-channel-offline-package", + "protocol-configuration", + "server-owned-receipts" + ] + }, + "state": "REGISTRATION_CANDIDATE_PENDING_REMOTE_READBACK" +} diff --git a/routing/lighthouse-path-registry.json b/routing/lighthouse-path-registry.json index 47479ad..299e91c 100644 --- a/routing/lighthouse-path-registry.json +++ b/routing/lighthouse-path-registry.json @@ -2,7 +2,7 @@ "schema": "guanghu.lighthouse-path-registry/v1", "registry_id": "GLW-LIGHTHOUSE-PATH-REGISTRY-001", "lighthouse_id": "SYS-GLW-LTH-0001", - "version": "2026-08-07.3", + "version": "2026-08-07.4", "state": "CURRENT_CANONICAL", "source_repository": "REPO-012", "source_branch": "main", @@ -85,6 +85,19 @@ "access_policy": "VERIFIED_LOCAL_DEDICATED_KEY_DIRECT_FIRST", "fallback_policy": "WORKORDER_EMAIL_ONLY_WHEN_LOCAL_COMPUTER_OR_REGISTERED_KEY_ROUTE_IS_UNAVAILABLE", "authority": "CURRENT_USER_TASK_SCOPE_AND_SERVER_OWNED_RECEIPT_REQUIRED" + }, + { + "id": "XX-GZ-001", + "kind": "member_owned_education_application_node", + "state": "CURRENT", + "online": null, + "offline": "deployment/navigation-maps/XX-GZ-001.json", + "human_controller": "小新", + "upstream": "JD-FD-PRIMARY", + "access_policy": "VERIFIED_LOCAL_DEDICATED_KEY_AND_DMI_PIN_REQUIRED", + "source_policy": "ARTIFACT_ONLY_NO_APPLICATION_SOURCE", + "update_policy": "GUANGHU_RELEASE_CHANNEL_ONLY", + "authority": "CURRENT_USER_TASK_SCOPE_AND_SERVER_OWNED_RECEIPT_REQUIRED" } ], "redirects": [ diff --git a/routing/public-navigation-anchor.json b/routing/public-navigation-anchor.json index 09e307c..d29df37 100644 --- a/routing/public-navigation-anchor.json +++ b/routing/public-navigation-anchor.json @@ -1,7 +1,7 @@ { "schema": "guanghu.public-navigation-anchor/v1", "anchor_id": "GLW-PUBLIC-NAV-ANCHOR-001", - "version": "2026-08-07.3", + "version": "2026-08-07.4", "state": "CURRENT_CANONICAL", "repository_id": "REPO-012", "branch": "main", @@ -24,7 +24,7 @@ "nodes": { "path": "routing/server-node-map.json", "id": "FD-NODE-MAP-001", - "version": "2026-08-03.1" + "version": "2026-08-07.4" }, "subjects": { "path": "identity/fifth-domain-subject-registry.json", @@ -42,7 +42,7 @@ "lighthouse_paths": { "path": "routing/lighthouse-path-registry.json", "id": "GLW-LIGHTHOUSE-PATH-REGISTRY-001", - "version": "2026-08-07.3" + "version": "2026-08-07.4" }, "host_skills": { "path": "routing/host-skill-navigation-map.json", diff --git a/routing/server-node-map.json b/routing/server-node-map.json index 6aa857c..8b5ab83 100644 --- a/routing/server-node-map.json +++ b/routing/server-node-map.json @@ -1,7 +1,7 @@ { "schema": "guanghu.server-node-map/v1", "map_id": "FD-NODE-MAP-001", - "version": "2026-08-03.1", + "version": "2026-08-07.4", "published_by": "REPO-012", "subject_alias_map": "identity/subject-id-alias-map.json", "canonical_api": "https://guanghulab.com/api/ai/v1/nodes", @@ -38,6 +38,19 @@ "disaster_recovery_layers": ["L2_TEAM_MEMBER_SERVERS", "L3_FIFTH_DOMAIN_LANGUAGE_CONTROLLER"], "keywords": ["企业服务器", "企业五域", "企业代码频道", "Awen技术主控"] }, + { + "node_id": "XX-GZ-001", + "name_zh": "小新教育行业节点", + "region": "CN-GUANGZHOU", + "role": "小新责任主体名下的高中项目师训运营应用节点；承载教育工作空间、光湖代码频道候选数据面和协议接入端，不承载冰朔私人第五域主控本体", + "state": "REGISTERED_DEPLOYMENT_PENDING", + "navigation_map": "deployment/navigation-maps/XX-GZ-001.json", + "upstream": "JD-FD-PRIMARY", + "human_controller": "小新", + "source_policy": "COMPILED_ARTIFACTS_ONLY_NO_APPLICATION_SOURCE", + "update_policy": "GUANGHU_CONTROLLED_RELEASES_ONLY_NO_OPEN_SOURCE_UPSTREAM_SYNC", + "keywords": ["小新服务器", "教育服务器", "高中项目师训", "教育行业节点"] + }, { "node_id": "BS-GZ-006", "name_zh": "广州备案前门",