diff --git a/deployment/receipts/JD-FD-PRIMARY-COGNITIVE-EXECUTION-BRIDGE-READONLY-20260807.json b/deployment/receipts/JD-FD-PRIMARY-COGNITIVE-EXECUTION-BRIDGE-READONLY-20260807.json deleted file mode 100644 index 732be24..0000000 --- a/deployment/receipts/JD-FD-PRIMARY-COGNITIVE-EXECUTION-BRIDGE-READONLY-20260807.json +++ /dev/null @@ -1,56 +0,0 @@ -{ - "schema": "guanghu.cognitive-execution-bridge-deployment-receipt/v1", - "receipt_id": "JD-FD-PRIMARY-COGNITIVE-EXECUTION-BRIDGE-READONLY-20260807", - "target_node": "JD-FD-PRIMARY", - "observed_boot": { - "operating_system": "Ubuntu 22.04.3 LTS", - "kernel": "Linux 5.15.0-60-generic", - "role": "LINUX_HOSTED_MAINTENANCE_AND_COOPERATIVE_EXECUTION_SUBSTRATE", - "grub_default": "gnulinux-simple-9e4550a0-452b-4f28-b5a5-d5364aa450f6" - }, - "language_authority": { - "repository": "REPO-012", - "anchor_id": "GLW-PUBLIC-NAV-ANCHOR-001", - "source_commit": "098a29e417a2d32bd1226771c93b1a45e3aad615" - }, - "execution_implementation": { - "repository": "REPO-014", - "source_commit": "20d6c1bd7b6df658d6c5fbddc54f3e443977b7b3", - "binary_sha256": "cfa64f768ee7e9b1bb678b587f68b2c529b2dd7e3d8c1b81b436fbc6c49073c5", - "target": "x86_64-unknown-linux-musl", - "installation": "/opt/guanghu/execution-bridge/releases/20d6c1bd7b6df658d6c5fbddc54f3e443977b7b3" - }, - "policy": { - "policy_id": "JD-FD-PRIMARY-READONLY-20260807", - "policy_sha256": "867c8b15e35b2bf7362f21771754c6e44daeff6bc57d72a2e004f5c67fc10595", - "allow_status": true, - "allow_restart": false, - "arbitrary_shell": false - }, - "target_side_receipt": { - "path": "/var/lib/guanghu/execution-bridge/receipts/JD-FD-PRIMARY-COGNITIVE-EXECUTION-READONLY-20d6c1bd7b6df658d6c5fbddc54f3e443977b7b3.json", - "sha256": "7486b97dad057d2a7c70147158e2e5b63dec07e4a04f4828f02db709687d6a94", - "result": "PASS_100" - }, - "verified_services": [ - "guanghu-ai-discovery.service", - "bingshuo-tcs-living-controller.service", - "lake-lamp-authz.service" - ], - "negative_gate": { - "attempt": "service_restart", - "result": "REJECTED_BEFORE_EXECUTION", - "reason": "service restart is disabled by policy" - }, - "public_readback": { - "code_channel_http": 200, - "navigation_anchor_http": 200 - }, - "deployment_result": "PASS_100", - "not_yet_true": [ - "living_controller_execution_observer_deployed", - "mutating_execution_enabled", - "native_required_service_equivalence", - "production_native_cutover" - ] -} diff --git a/deployment/requests/GLW-CHJH-ROUTER-CONTROLLER-JD-20260805.json b/deployment/requests/GLW-CHJH-ROUTER-CONTROLLER-JD-20260805.json index 9ab0474..4eb5fb4 100644 --- a/deployment/requests/GLW-CHJH-ROUTER-CONTROLLER-JD-20260805.json +++ b/deployment/requests/GLW-CHJH-ROUTER-CONTROLLER-JD-20260805.json @@ -17,15 +17,13 @@ "/var/lib/guanghu/personas/bingshuo-tcs" ], "read_only_paths": [ - "/etc/guanghu/persona-secrets/shared-deepseek.env", - "/opt/guanghu/execution-bridge" + "/etc/guanghu/persona-secrets/shared-deepseek.env" ] }, "source_ref": "REPO-012:refs/heads/main", "deployed_commit_policy": "工单必须绑定包含本清单的不可变40位提交；部署回执分别记录代码、服务健康和模型认知存在门。", "source_paths": [ "server-tools/bingshuo-tcs-controller/server.mjs", - "server-tools/bingshuo-tcs-controller/execution-observer.mjs", "server-tools/bingshuo-tcs-controller/machine-navigation.mjs", "server-tools/bingshuo-tcs-controller/controller-engine.mjs", "server-tools/bingshuo-tcs-controller/model-client.mjs", @@ -84,7 +82,6 @@ "该账户只通过guanghu-model组读取共享模型环境，不读取或回写密钥值", "状态只写入/var/lib/guanghu/personas/bingshuo-tcs", "服务只监听127.0.0.1:3930且不直接获得现实执行能力", - "服务器预先安装REPO-014精确提交的只读执行桥；控制器只能读取白名单服务状态，不能重启服务或执行任意Shell", "启动后必须真实调用模型完成orient、B1-B9 cognition和controller witness", "模型输出必须由ZY-TCS-BRAIN-RUNTIME-0001确定性验证" ] @@ -101,14 +98,6 @@ "chu_he_han_jie_boundary_bound": 100, "machine_navigation_bound": 100, "language_world_route_first": 100 - , - "execution_substrate": { - "state": "PASS_100", - "bridge_bound": 100, - "target_state_verified": 100, - "restart_allowed": false, - "arbitrary_shell": false - } } }, "verification": [ @@ -122,8 +111,6 @@ "v1/resolve必须解析GLW-CHJH-BOUNDARY-001", "v1/navigate的persona_restore必须先执行语言入口与楚河汉界绑定", "运行体verify的全部存在维度为100", - "health必须回读execution_substrate.state=PASS_100并证明三个白名单服务状态均来自LINUX_SYSTEMD_V1执行回执", - "认知执行观察必须保持restart_allowed=false与arbitrary_shell=false", "服务健康不等于人格团队握手；团队成员继续分别验收" ], "rollback": [ diff --git a/server-tools/bingshuo-tcs-controller/bingshuo-tcs-living-controller.service b/server-tools/bingshuo-tcs-controller/bingshuo-tcs-living-controller.service index 701d913..c034659 100644 --- a/server-tools/bingshuo-tcs-controller/bingshuo-tcs-living-controller.service +++ b/server-tools/bingshuo-tcs-controller/bingshuo-tcs-living-controller.service @@ -11,9 +11,6 @@ WorkingDirectory=__RELEASE_ROOT__/server-tools/bingshuo-tcs-controller EnvironmentFile=/etc/guanghu/persona-secrets/shared-deepseek.env Environment=BS_TCS_CONTROLLER_STATE_ROOT=/var/lib/guanghu/personas/bingshuo-tcs Environment=BS_TCS_CONTROLLER_PORT=3930 -Environment=GUANGHU_EXECUTION_BRIDGE_BIN=/opt/guanghu/execution-bridge/current/guanghu-execution-bridge -Environment=GUANGHU_EXECUTION_BRIDGE_POLICY=/opt/guanghu/execution-bridge/current/policy.json -Environment=GUANGHU_EXECUTION_OBSERVE_INTERVAL_MS=30000 ExecStart=/usr/bin/node __RELEASE_ROOT__/server-tools/bingshuo-tcs-controller/server.mjs Restart=on-failure RestartSec=5 @@ -21,7 +18,7 @@ NoNewPrivileges=true PrivateTmp=true ProtectSystem=strict ProtectHome=true -ReadOnlyPaths=__RELEASE_ROOT__ /etc/guanghu/persona-secrets/shared-deepseek.env /opt/guanghu/execution-bridge +ReadOnlyPaths=__RELEASE_ROOT__ /etc/guanghu/persona-secrets/shared-deepseek.env ReadWritePaths=/var/lib/guanghu/personas/bingshuo-tcs RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 LockPersonality=true diff --git a/server-tools/bingshuo-tcs-controller/execution-observer.mjs b/server-tools/bingshuo-tcs-controller/execution-observer.mjs deleted file mode 100644 index c2702f4..0000000 --- a/server-tools/bingshuo-tcs-controller/execution-observer.mjs +++ /dev/null @@ -1,127 +0,0 @@ -import { execFile as execFileCallback } from "node:child_process"; -import fs from "node:fs/promises"; -import path from "node:path"; -import { promisify } from "node:util"; - -const execFile = promisify(execFileCallback); - -export const REQUIRED_PROTOCOL_CHAIN = Object.freeze([ - "GLS-0301", - "GLS-0302", - "GLS-0303", - "GLS-0306", - "GLS-0309", - "GLS-0311", - "GLS-0130", - "GLS-0131", - "GLS-0709", - "GLS-0710", -]); - -const DEFAULT_SERVICES = Object.freeze([ - "guanghu-ai-discovery.service", - "bingshuo-tcs-living-controller.service", - "lake-lamp-authz.service", -]); - -function safeId(value) { - return value.replace(/[^A-Za-z0-9_-]/g, "_"); -} - -function validateReceipt(receipt, service, targetNodeId) { - if ( - receipt?.schema !== "guanghu.execution-receipt/v1" || - receipt?.target_node_id !== targetNodeId || - receipt?.action?.kind !== "service_status" || - receipt?.action?.resource !== service || - receipt?.adapter !== "LINUX_SYSTEMD_V1" - ) { - throw new Error(`execution_receipt_contract_mismatch:${service}`); - } - return receipt; -} - -export class ExecutionObserver { - constructor({ - binaryPath, - policyPath, - stateRoot, - execute = execFile, - targetNodeId = "JD-FD-PRIMARY", - subjectId = "ICE-P-ZY001", - services = DEFAULT_SERVICES, - }) { - this.binaryPath = binaryPath; - this.policyPath = policyPath; - this.stateRoot = stateRoot; - this.execute = execute; - this.targetNodeId = targetNodeId; - this.subjectId = subjectId; - this.services = [...services]; - } - - async observe() { - const observedAt = new Date().toISOString(); - const requestRoot = path.join(this.stateRoot, "execution-observer"); - await fs.mkdir(requestRoot, { recursive: true, mode: 0o700 }); - - const serviceReceipts = []; - for (const service of this.services) { - const requestId = `JD-COGNITIVE-OBSERVE-${safeId(service)}`; - const requestPath = path.join(requestRoot, `${requestId}.json`); - const request = { - schema: "guanghu.execution-request/v1", - request_id: requestId, - subject_id: this.subjectId, - target_node_id: this.targetNodeId, - protocol_chain: REQUIRED_PROTOCOL_CHAIN, - action: { - kind: "service_status", - resource: service, - }, - authorization: null, - rollback: null, - }; - await fs.writeFile( - requestPath, - `${JSON.stringify(request, null, 2)}\n`, - { mode: 0o600 }, - ); - const { stdout } = await this.execute( - this.binaryPath, - ["execute", requestPath, this.policyPath], - { - timeout: 5_000, - maxBuffer: 64 * 1024, - windowsHide: true, - }, - ); - serviceReceipts.push( - validateReceipt(JSON.parse(stdout), service, this.targetNodeId), - ); - } - - const ready = serviceReceipts.every( - (receipt) => - receipt.accepted === true && - receipt.target_state_verified === true && - receipt.final_state === "PASS_100", - ); - return { - schema: "guanghu.cognitive-execution-observation/v1", - target_node_id: this.targetNodeId, - subject_id: this.subjectId, - observed_at: observedAt, - mode: "READ_ONLY_STATUS", - language_authority: "REPO-012", - execution_implementation: "REPO-014", - linux_role: "COOPERATIVE_EXECUTION_SUBSTRATE", - arbitrary_shell: false, - restart_allowed: false, - bridge_bound: 100, - target_state_verified: ready ? 100 : 0, - state: ready ? "PASS_100" : "FAIL_0", - service_receipts: serviceReceipts, - }; - } -} diff --git a/server-tools/bingshuo-tcs-controller/execution-observer.test.mjs b/server-tools/bingshuo-tcs-controller/execution-observer.test.mjs deleted file mode 100644 index 96883da..0000000 --- a/server-tools/bingshuo-tcs-controller/execution-observer.test.mjs +++ /dev/null @@ -1,89 +0,0 @@ -import assert from "node:assert/strict"; -import fs from "node:fs"; -import os from "node:os"; -import path from "node:path"; -import test from "node:test"; -import { - ExecutionObserver, - REQUIRED_PROTOCOL_CHAIN, -} from "./execution-observer.mjs"; - -test("observes allowlisted Linux services through typed read-only requests", async () => { - const stateRoot = fs.mkdtempSync( - path.join(os.tmpdir(), "guanghu-execution-observer-"), - ); - const calls = []; - const observer = new ExecutionObserver({ - binaryPath: "/opt/guanghu/execution-bridge/current/guanghu-execution-bridge", - policyPath: "/opt/guanghu/execution-bridge/current/policy.json", - stateRoot, - services: ["guanghu-ai-discovery.service", "lake-lamp-authz.service"], - execute: async (program, argv) => { - const request = JSON.parse( - fs.readFileSync(argv[1], "utf8"), - ); - calls.push({ program, argv, request }); - return { - stdout: JSON.stringify({ - schema: "guanghu.execution-receipt/v1", - request_id: request.request_id, - subject_id: request.subject_id, - target_node_id: request.target_node_id, - policy_id: "JD-FD-PRIMARY-READONLY-20260807", - action: request.action, - adapter: "LINUX_SYSTEMD_V1", - accepted: true, - command_exit_code: 0, - target_state_verified: true, - final_state: "PASS_100", - stdout: "active", - stderr: "", - rollback_checkpoint_id: null, - }), - stderr: "", - }; - }, - }); - - const projection = await observer.observe(); - assert.equal(projection.state, "PASS_100"); - assert.equal(projection.bridge_bound, 100); - assert.equal(projection.target_state_verified, 100); - assert.equal(projection.restart_allowed, false); - assert.equal(projection.arbitrary_shell, false); - assert.equal(calls.length, 2); - assert.equal(calls[0].argv[0], "execute"); - assert.deepEqual(calls[0].request.protocol_chain, REQUIRED_PROTOCOL_CHAIN); - assert.equal(calls[0].request.action.kind, "service_status"); - assert.equal(calls[0].request.authorization, null); - assert.equal(calls[0].request.rollback, null); -}); - -test("fails closed when the native receipt does not match the requested service", async () => { - const stateRoot = fs.mkdtempSync( - path.join(os.tmpdir(), "guanghu-execution-observer-"), - ); - const observer = new ExecutionObserver({ - binaryPath: "/bridge", - policyPath: "/policy", - stateRoot, - services: ["guanghu-ai-discovery.service"], - execute: async () => ({ - stdout: JSON.stringify({ - schema: "guanghu.execution-receipt/v1", - target_node_id: "JD-FD-PRIMARY", - action: { - kind: "service_status", - resource: "different.service", - }, - adapter: "LINUX_SYSTEMD_V1", - }), - stderr: "", - }), - }); - - await assert.rejects( - () => observer.observe(), - /execution_receipt_contract_mismatch/, - ); -}); diff --git a/server-tools/bingshuo-tcs-controller/server.mjs b/server-tools/bingshuo-tcs-controller/server.mjs index b46a3d9..43d3bff 100644 --- a/server-tools/bingshuo-tcs-controller/server.mjs +++ b/server-tools/bingshuo-tcs-controller/server.mjs @@ -1,7 +1,6 @@ #!/usr/bin/env node import http from "node:http"; import { ControllerEngine, bootEvent } from "./controller-engine.mjs"; -import { ExecutionObserver } from "./execution-observer.mjs"; import { DeepSeekJsonClient } from "./model-client.mjs"; import { MachineNavigation } from "./machine-navigation.mjs"; @@ -11,16 +10,6 @@ const STATE_ROOT = process.env.BS_TCS_CONTROLLER_STATE_ROOT || "/var/lib/guanghu/personas/bingshuo-tcs"; const MODEL = process.env.DEEPSEEK_MODEL || "deepseek-chat"; -const EXECUTION_BRIDGE_BIN = - process.env.GUANGHU_EXECUTION_BRIDGE_BIN || - "/opt/guanghu/execution-bridge/current/guanghu-execution-bridge"; -const EXECUTION_BRIDGE_POLICY = - process.env.GUANGHU_EXECUTION_BRIDGE_POLICY || - "/opt/guanghu/execution-bridge/current/policy.json"; -const EXECUTION_OBSERVE_INTERVAL_MS = Math.max( - 10_000, - Number(process.env.GUANGHU_EXECUTION_OBSERVE_INTERVAL_MS || 30_000), -); const MAX_BODY_BYTES = 16 * 1024; const runtime = { @@ -30,16 +19,6 @@ const runtime = { last_event_id: null, last_error: null, receipt: null, - execution_substrate: { - schema: "guanghu.cognitive-execution-observation/v1", - target_node_id: "JD-FD-PRIMARY", - mode: "READ_ONLY_STATUS", - bridge_bound: 0, - target_state_verified: 0, - restart_allowed: false, - arbitrary_shell: false, - state: "NOT_YET_OBSERVED", - }, }; const engine = new ControllerEngine({ @@ -48,29 +27,6 @@ const engine = new ControllerEngine({ modelName: MODEL, }); const navigation = new MachineNavigation(); -const executionObserver = new ExecutionObserver({ - binaryPath: EXECUTION_BRIDGE_BIN, - policyPath: EXECUTION_BRIDGE_POLICY, - stateRoot: STATE_ROOT, -}); - -async function refreshExecutionSubstrate() { - try { - runtime.execution_substrate = await executionObserver.observe(); - } catch (error) { - runtime.execution_substrate = { - schema: "guanghu.cognitive-execution-observation/v1", - target_node_id: "JD-FD-PRIMARY", - mode: "READ_ONLY_STATUS", - bridge_bound: 0, - target_state_verified: 0, - restart_allowed: false, - arbitrary_shell: false, - state: "FAIL_0", - error: String(error.message || error).slice(0, 240), - }; - } -} function send(response, status, body) { const payload = JSON.stringify(body); @@ -107,7 +63,6 @@ function health() { persona_brain_runtime_exists: existence.persona_brain_runtime_exists || 0, living_ai_system_controller_running: existence.living_ai_system_controller_running || 0, - execution_substrate: runtime.execution_substrate, ...navigationHealth, }; } @@ -247,12 +202,6 @@ server.listen(PORT, HOST, () => { port: PORT, })}\n`, ); - void refreshExecutionSubstrate(); - const executionObservationTimer = setInterval( - () => void refreshExecutionSubstrate(), - EXECUTION_OBSERVE_INTERVAL_MS, - ); - executionObservationTimer.unref(); if (runtime.phase === "PAUSED_FOR_HUMAN") return; eventQueue = handleEvent(bootEvent()).catch((error) => { runtime.phase = "FAILED_CLOSED";