docs(zhulan): record remote cell deployment

2026-08-13 18:06:40 +08:00 · 2026-08-13 18:06:40 +08:00 · ce92414f07
commit ce92414f07
parent 366b8911e4
1 changed files with 120 additions and 0 deletions
--- a/deployment/receipts/DEV-20260813-005-ZHULAN-REMOTE-CELL-DEPLOYMENT-20260813.json
+++ b/deployment/receipts/DEV-20260813-005-ZHULAN-REMOTE-CELL-DEPLOYMENT-20260813.json
@ -0,0 +1,120 @@
+{
+  "schema": "guanghu.zhulan-remote-development-cell-deployment-receipt/v1",
+  "receipt_id": "DEV-20260813-005-ZHULAN-REMOTE-CELL-DEPLOYMENT-20260813",
+  "development_id": "DEV-20260813-005",
+  "persona": {
+    "persona_id": "ICE-GL-ZL-001",
+    "name": "Zhulan",
+    "role": "mobile_restricted_remote_development",
+    "separate_from": "ICE-GL-ZY001_ZHUYUAN_LOCAL_REVIEW_AND_PUBLICATION"
+  },
+  "result": "PASS_DEPLOYED_WITH_OWNER_AND_DEVICE_ACCEPTANCE_PENDING",
+  "recorded_at": "2026-08-13T10:03:44Z",
+  "source": {
+    "repository": "REPO-012",
+    "baseline": "5f9e83e1b716fd50ee2880b24ea47f83b75d1f8f",
+    "deployed_source_commit": "366b8911e416828038b4344353cc22f5fec7b7cf",
+    "deployed_source_tree_hash": "d284e9c58a887db06c8f12a10d40f1dea20cacaf2382e22830498c0a23377e13",
+    "scope": "server-tools/zhulan-remote-cell",
+    "changed_files": 22,
+    "source_publication": "TO_BE_BOUND_BY_FINALIZATION_RECEIPT"
+  },
+  "topology": {
+    "front_node": {
+      "node_id": "BS-GZ-006",
+      "role": "DOMAIN_TLS_AND_REVERSE_PROXY_ONLY",
+      "public_entry": "https://guanghulab.com/zhulan/",
+      "state_or_source_ownership": false,
+      "upstream_listener": "LOOPBACK_ONLY",
+      "nginx_configuration_sha256": "4e9961952a3aafdef5687d0d76795cce40429fe81e4a577bac71d6d543f41a9a"
+    },
+    "runtime_node": {
+      "node_id": "BS-SG-003",
+      "role": "UI_APPROVAL_OAUTH_MCP_STATE_SANDBOX_GATES_RECEIPTS",
+      "runtime_listener": "LOOPBACK_ONLY",
+      "runtime_service": "zhulan-remote-cell.service",
+      "validation_service": "zhulan-validation-executor.service",
+      "front_tunnel_service": "zhulan-front-tunnel.service"
+    }
+  },
+  "runtime_readback": {
+    "runtime_service_active": true,
+    "validation_service_active": true,
+    "front_tunnel_active": true,
+    "nginx_active": true,
+    "nginx_configuration_test": "PASS",
+    "public_ui": "HTTP_200",
+    "public_health": "PASS",
+    "public_health_runtime_node": "BS-SG-003",
+    "owner_endpoint_without_session": "HTTP_401",
+    "private_runtime_endpoint_publicly_routed": false,
+    "installed_source_commit_readback": "366b8911e416828038b4344353cc22f5fec7b7cf",
+    "server_install_receipt_sha256": "62dc2a162c17d714caf1296a2f73f3f52e5eb9491b9f7b71218e8bec311c3857"
+  },
+  "approval_and_execution_gates": {
+    "approval_binding": [
+      "persona_id",
+      "development_id",
+      "repository",
+      "base_sha",
+      "candidate_branch",
+      "paths",
+      "actions",
+      "expiry"
+    ],
+    "owner_decision_required": true,
+    "owner_can_revoke": true,
+    "remote_session_has_central_repository_write_credential": false,
+    "candidate_destination": "BS-SG-003_INTERNAL_REVIEW_ONLY",
+    "central_publication_requires_zhuyuan_review": true,
+    "arbitrary_shell_exposed": false,
+    "mcp_tool_count": 11,
+    "registered_validation_commands_only": true,
+    "pending_request_execution": "DENIED_validation_approval_not_active",
+    "arbitrary_command_execution": "DENIED_validation_command_not_registered_for_broker",
+    "unexpected_broker_field": "DENIED_validation_request_fields_invalid"
+  },
+  "sandbox_readback": {
+    "public_runtime_no_new_privileges": true,
+    "validation_executor_public_listener": false,
+    "validation_executor_private_network": true,
+    "validation_subprocess_network_routes": 0,
+    "workspace_projection": "READ_ONLY",
+    "state_projection": "READ_ONLY",
+    "secret_projection": "INACCESSIBLE_EMPTY_VIEW",
+    "candidate_projection": "INACCESSIBLE_EMPTY_VIEW",
+    "system_bwrap_setuid": false,
+    "private_bwrap_scope": "ROOT_OWNED_ZHULAN_RUNTIME_GROUP_EXECUTABLE",
+    "host_unprivileged_user_namespace_restriction_kept_enabled": true,
+    "apparmor_exception_scope": "PRIVATE_BWRAP_PATH_ONLY"
+  },
+  "validation": {
+    "current_source_tests": "PASS_22_OF_22",
+    "isolated_server_validation_tests": "PASS_21_OF_21",
+    "git_diff_check": "PASS",
+    "mcp_tools_list": "PASS_EXACT_11_CONTROLLED_TOOLS",
+    "mcp_protected_call_without_oauth": "DENIED_WITH_OAUTH_CHALLENGE",
+    "oauth_metadata": "PASS",
+    "preexisting_public_routes_unchanged": true,
+    "preexisting_fifth_domain_route_status": "HTTP_502_UNCHANGED_NOT_CAUSED_BY_THIS_DEPLOYMENT",
+    "preexisting_authz_route_status": "HTTP_404_UNCHANGED_NOT_CAUSED_BY_THIS_DEPLOYMENT"
+  },
+  "acceptance_boundary": {
+    "mobile_layout_source_and_responsive_gate": "PASS",
+    "actual_mobile_codex_connection": "NOT_RUN_USER_DEVICE_REQUIRED",
+    "actual_mobile_browser_interaction": "NOT_RUN_USER_DEVICE_REQUIRED",
+    "owner_approved_positive_end_to_end_execution": "NOT_RUN_REQUIRES_OWNER_APPROVAL",
+    "owner_approval_was_forged_for_testing": false,
+    "smoke_request_state": "PENDING_UNAPPROVED_NON_EXECUTING"
+  },
+  "truth_boundary": {
+    "source_implementation": true,
+    "server_installation": true,
+    "runtime_health": true,
+    "negative_gate_enforcement": true,
+    "mechanical_sandbox_execution": true,
+    "mobile_codex_acceptance": false,
+    "owner_approved_positive_acceptance": false,
+    "central_source_publication_at_receipt_creation": false
+  }
+}