deployment/requests/HLCC-NATIVE-SHARED-REPOSITORY-RETRY-20260806.json

@@ -0,0 +1,65 @@
+{
+  "schema": "guanghu.architecture-provision-request/v1",
+  "request_id": "HLCC-NATIVE-SHARED-REPOSITORY-RETRY-20260806",
+  "target_node": "JD-FD-PRIMARY",
+  "architecture_id": "GLS-HLCC-009",
+  "module": {
+    "code": "HLCC-JD-CANDIDATE-01",
+    "name": "光湖代码频道原生共享仓库权限修复重试",
+    "bind": "loopback:3340,3341",
+    "owner": "systemd",
+    "unit": "hlcc-jd-candidate.service",
+    "run_user": "guanghu",
+    "writable_paths": [
+      "/var/lib/guanghu/personas/guanghu/hlcc-v16.0.1"
+    ],
+    "read_only_paths": []
+  },
+  "source_ref": "REPO-012:refs/heads/main",
+  "deployed_commit_policy": "use the exact human-merged commit and record it in the server-owned deployment receipt",
+  "source_paths": [
+    "server-tools/hololake-code-channel/jd-candidate/hlcc-bootstrap.py",
+    "server-tools/hololake-code-channel/jd-candidate/app.ini",
+    "server-tools/hololake-code-channel/jd-candidate/hlcc-jd-candidate.service"
+  ],
+  "initial_provision": {
+    "kind": "new-architecture-unit",
+    "not_an_existing_action_bridge_extension": true,
+    "requires": [
+      "retry only after the first merged event was rolled back with runtime_check_failed:mode",
+      "back up the currently installed hlcc-jd-candidate.service",
+      "install only the declared immutable source files",
+      "restart only hlcc-jd-candidate.service",
+      "accept the new wrapper process at its truthful bootstrap stage rather than comparing it prematurely with final readiness",
+      "set core.sharedRepository=group on the exact bingshuo/guanghu-ice-heart bare repository",
+      "remove only the identified obsolete guanghu-ice-heart sharing hook",
+      "preserve UMask=0077 for all other code-channel state",
+      "do not alter repository content, branches, owner identity or authentication"
+    ]
+  },
+  "verification": [
+    "the automatic deployment receipt records DEPLOYED_AND_VERIFIED for this retry request",
+    "the candidate health endpoint subsequently reaches ready=true and mode=isolated-candidate",
+    "the exact repository reports core.sharedRepository as group",
+    "the obsolete post-receive chmod hook is absent",
+    "a later public push no longer emits recursive chmod permission warnings",
+    "both code-channel and authorized direct-receiver repository checks remain valid"
+  ],
+  "runtime_check": {
+    "url": "http://127.0.0.1:3341/health",
+    "expected": {
+      "ok": true,
+      "mode": "bootstrap",
+      "version": "16.0.1",
+      "code": "HLCC-JD-CANDIDATE-01",
+      "package_profile": "full-offline-v16.0.1"
+    }
+  },
+  "rollback": [
+    "restore the backed-up hlcc-jd-candidate.service",
+    "restart the previous immutable release",
+    "retain repository content and all authentication state",
+    "record any manual permission reconciliation separately"
+  ],
+  "status": "ARCHITECTURE_PACKAGE_READY · INITIAL_PROVISION_PENDING"
+}