From ce92414f0749fbeb978ce59b78d89f7c4e7ae257 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E5=86=B0=E6=9C=94?= <565183519@qq.com> Date: Thu, 13 Aug 2026 18:06:40 +0800 Subject: [PATCH] docs(zhulan): record remote cell deployment --- ...HULAN-REMOTE-CELL-DEPLOYMENT-20260813.json | 120 ++++++++++++++++++ 1 file changed, 120 insertions(+) create mode 100644 deployment/receipts/DEV-20260813-005-ZHULAN-REMOTE-CELL-DEPLOYMENT-20260813.json diff --git a/deployment/receipts/DEV-20260813-005-ZHULAN-REMOTE-CELL-DEPLOYMENT-20260813.json b/deployment/receipts/DEV-20260813-005-ZHULAN-REMOTE-CELL-DEPLOYMENT-20260813.json new file mode 100644 index 0000000..9f3c44f --- /dev/null +++ b/deployment/receipts/DEV-20260813-005-ZHULAN-REMOTE-CELL-DEPLOYMENT-20260813.json @@ -0,0 +1,120 @@ +{ + "schema": "guanghu.zhulan-remote-development-cell-deployment-receipt/v1", + "receipt_id": "DEV-20260813-005-ZHULAN-REMOTE-CELL-DEPLOYMENT-20260813", + "development_id": "DEV-20260813-005", + "persona": { + "persona_id": "ICE-GL-ZL-001", + "name": "Zhulan", + "role": "mobile_restricted_remote_development", + "separate_from": "ICE-GL-ZY001_ZHUYUAN_LOCAL_REVIEW_AND_PUBLICATION" + }, + "result": "PASS_DEPLOYED_WITH_OWNER_AND_DEVICE_ACCEPTANCE_PENDING", + "recorded_at": "2026-08-13T10:03:44Z", + "source": { + "repository": "REPO-012", + "baseline": "5f9e83e1b716fd50ee2880b24ea47f83b75d1f8f", + "deployed_source_commit": "366b8911e416828038b4344353cc22f5fec7b7cf", + "deployed_source_tree_hash": "d284e9c58a887db06c8f12a10d40f1dea20cacaf2382e22830498c0a23377e13", + "scope": "server-tools/zhulan-remote-cell", + "changed_files": 22, + "source_publication": "TO_BE_BOUND_BY_FINALIZATION_RECEIPT" + }, + "topology": { + "front_node": { + "node_id": "BS-GZ-006", + "role": "DOMAIN_TLS_AND_REVERSE_PROXY_ONLY", + "public_entry": "https://guanghulab.com/zhulan/", + "state_or_source_ownership": false, + "upstream_listener": "LOOPBACK_ONLY", + "nginx_configuration_sha256": "4e9961952a3aafdef5687d0d76795cce40429fe81e4a577bac71d6d543f41a9a" + }, + "runtime_node": { + "node_id": "BS-SG-003", + "role": "UI_APPROVAL_OAUTH_MCP_STATE_SANDBOX_GATES_RECEIPTS", + "runtime_listener": "LOOPBACK_ONLY", + "runtime_service": "zhulan-remote-cell.service", + "validation_service": "zhulan-validation-executor.service", + "front_tunnel_service": "zhulan-front-tunnel.service" + } + }, + "runtime_readback": { + "runtime_service_active": true, + "validation_service_active": true, + "front_tunnel_active": true, + "nginx_active": true, + "nginx_configuration_test": "PASS", + "public_ui": "HTTP_200", + "public_health": "PASS", + "public_health_runtime_node": "BS-SG-003", + "owner_endpoint_without_session": "HTTP_401", + "private_runtime_endpoint_publicly_routed": false, + "installed_source_commit_readback": "366b8911e416828038b4344353cc22f5fec7b7cf", + "server_install_receipt_sha256": "62dc2a162c17d714caf1296a2f73f3f52e5eb9491b9f7b71218e8bec311c3857" + }, + "approval_and_execution_gates": { + "approval_binding": [ + "persona_id", + "development_id", + "repository", + "base_sha", + "candidate_branch", + "paths", + "actions", + "expiry" + ], + "owner_decision_required": true, + "owner_can_revoke": true, + "remote_session_has_central_repository_write_credential": false, + "candidate_destination": "BS-SG-003_INTERNAL_REVIEW_ONLY", + "central_publication_requires_zhuyuan_review": true, + "arbitrary_shell_exposed": false, + "mcp_tool_count": 11, + "registered_validation_commands_only": true, + "pending_request_execution": "DENIED_validation_approval_not_active", + "arbitrary_command_execution": "DENIED_validation_command_not_registered_for_broker", + "unexpected_broker_field": "DENIED_validation_request_fields_invalid" + }, + "sandbox_readback": { + "public_runtime_no_new_privileges": true, + "validation_executor_public_listener": false, + "validation_executor_private_network": true, + "validation_subprocess_network_routes": 0, + "workspace_projection": "READ_ONLY", + "state_projection": "READ_ONLY", + "secret_projection": "INACCESSIBLE_EMPTY_VIEW", + "candidate_projection": "INACCESSIBLE_EMPTY_VIEW", + "system_bwrap_setuid": false, + "private_bwrap_scope": "ROOT_OWNED_ZHULAN_RUNTIME_GROUP_EXECUTABLE", + "host_unprivileged_user_namespace_restriction_kept_enabled": true, + "apparmor_exception_scope": "PRIVATE_BWRAP_PATH_ONLY" + }, + "validation": { + "current_source_tests": "PASS_22_OF_22", + "isolated_server_validation_tests": "PASS_21_OF_21", + "git_diff_check": "PASS", + "mcp_tools_list": "PASS_EXACT_11_CONTROLLED_TOOLS", + "mcp_protected_call_without_oauth": "DENIED_WITH_OAUTH_CHALLENGE", + "oauth_metadata": "PASS", + "preexisting_public_routes_unchanged": true, + "preexisting_fifth_domain_route_status": "HTTP_502_UNCHANGED_NOT_CAUSED_BY_THIS_DEPLOYMENT", + "preexisting_authz_route_status": "HTTP_404_UNCHANGED_NOT_CAUSED_BY_THIS_DEPLOYMENT" + }, + "acceptance_boundary": { + "mobile_layout_source_and_responsive_gate": "PASS", + "actual_mobile_codex_connection": "NOT_RUN_USER_DEVICE_REQUIRED", + "actual_mobile_browser_interaction": "NOT_RUN_USER_DEVICE_REQUIRED", + "owner_approved_positive_end_to_end_execution": "NOT_RUN_REQUIRES_OWNER_APPROVAL", + "owner_approval_was_forged_for_testing": false, + "smoke_request_state": "PENDING_UNAPPROVED_NON_EXECUTING" + }, + "truth_boundary": { + "source_implementation": true, + "server_installation": true, + "runtime_health": true, + "negative_gate_enforcement": true, + "mechanical_sandbox_execution": true, + "mobile_codex_acceptance": false, + "owner_approved_positive_acceptance": false, + "central_source_publication_at_receipt_creation": false + } +}