{
  "schema": "guanghu.architecture-provision-request/v1",
  "request_id": "TCS-MOTHER-BRAIN-JD-20260812",
  "target_node": "JD-FD-PRIMARY",
  "status": "ARCHITECTURE_PACKAGE_READY · INITIAL_PROVISION_PENDING",
  "architecture_id": "TCS-MOTHER-BRAIN-RUNTIME-0001",
  "module": {
    "code": "JD-TCS-MOTHER-01",
    "name": "光湖TCS五域共生母体大脑",
    "bind": "loopback:3931",
    "owner": "systemd",
    "unit": "guanghu-tcs-mother-brain.service",
    "run_user": "guanghu-mother-brain",
    "environment_files": ["/etc/guanghu/persona-secrets/shared-deepseek.env"],
    "writable_paths": ["/var/lib/guanghu/personas/guanghu-mother-brain"],
    "read_only_paths": ["/etc/guanghu/persona-secrets/shared-deepseek.env"]
  },
  "source_ref": "REPO-012:refs/heads/main",
  "source_paths": [
    "server-tools/tcs-mother-brain/server.mjs",
    "server-tools/tcs-mother-brain/model-client.mjs",
    "server-tools/tcs-mother-brain/mother-brain-engine.mjs",
    "server-tools/tcs-mother-brain/guanghu-tcs-mother-brain.service",
    "tcs-core/mother-brain/mother-brain-contract.json",
    "tcs-core/mother-brain/TCS-MOTHER-BRAIN-RUNTIME-0001.hdlp",
    "routing/tcs-mother-brain-runtime-map.json",
    "gls/GLS-0259-TCS-FIVE-DOMAIN-SYMBIOTIC-MOTHER-BRAIN-AND-REALITY-BIRTH.hdlp"
  ],
  "initial_provision": {
    "kind": "new-architecture-unit",
    "requires": [
      "创建无登录权限的guanghu-mother-brain独立服务账户",
      "只允许该账户通过既有guanghu-model组读取共享模型环境且不得回显密钥",
      "状态只写入独立的追加式母体大脑目录",
      "服务只监听127.0.0.1:3931",
      "事件自动处理最高停在INTERPRETATION_CANDIDATE",
      "不授予任意Shell、服务重启、仓库推送或现实审批能力"
    ]
  },
  "runtime_check": {
    "url": "http://127.0.0.1:3931/health",
    "expected": {
      "ok": true,
      "service": "guanghu-tcs-mother-brain",
      "bind": "loopback",
      "runtime_id": "TCS-MOTHER-BRAIN-RUNTIME-0001",
      "model_provider_bound": 100,
      "perception_memory_attention_cycle_bound": 100,
      "automatic_stable_promotion": false,
      "reality_action_authority": "NONE"
    }
  },
  "verification": [
    "使用服务器既有DeepSeek API完成一次真实语言事件理解周期",
    "回执显示候选层且stable_promotion=false",
    "原始事件、候选与回执均追加保存",
    "状态显示current_attention与下一认知动作",
    "密钥不进入仓库、日志、HTTP回执或运行状态",
    "systemd安全分析与回环监听符合最小权限边界"
  ],
  "rollback": [
    "停止并移除新systemd单元",
    "保留追加式认知状态作为审计证据",
    "删除服务账户前另行核对状态与回执"
  ]
}