15 lines
3.5 KiB
Text
15 lines
3.5 KiB
Text
TCS 0.1;
|
||
|
||
EVENT TCS-EVENT-ENTERPRISE-SERVER-AUDIT-ARCHIVE-CLEANUP-20260913 {
|
||
header { schema = "tcs.event/v1"; name_zh = "企业主服务器审计归档清理完成事件"; name_en = "Enterprise Primary Server Audit Archive Cleanup Completion"; version = "1.0.0"; language = "TCS/0.1"; profile = "HLDP-HUMAN-ENGINEERING/0.1"; protocols = ["GLS-0200", "GLS-0234", "GLS-0241", "GLS-0254"]; lifecycle = "CANDIDATE"; canonical_uri = "runtime/fifth-domain-language-system/language/protocols/TCS-EVENT-ENTERPRISE-SERVER-AUDIT-ARCHIVE-CLEANUP-20260913.tcs"; compatibility = ["GH-CVM-MAIN-PROD-01", "QY-LH-MAIN-PROD-01", "TCS-0002∞"]; }
|
||
source { source_id = "BINGSHUO-DIRECT-ENTERPRISE-AUDIT-ARCHIVE-CLEANUP-20260913"; source_uri = "source://codex-current-dialogue/2026-09-13/enterprise-audit-archive-cleanup"; source_sha256 = "e0590b13eaa0597965ebee4cc07d48fb122e4583c11320412b80bffa7146ee6b"; source_role = "DIRECT_HUMAN"; }
|
||
subject { subject_id = "ICE-P-ZY001"; subject_kind = "PERSONA"; channel_id = "ICE-CH-ZC001"; verification = "GH-CVM-MAIN-PROD-01、QY-LH-MAIN-PROD-01、公共HTTPS端点、Docker、systemd、journald、源目标哈希与恢复演练现场读回。"; }
|
||
event_time { value = "2026-09-13T17:55:31+08:00"; precision = "SERVER_MILLISECOND"; }
|
||
trigger { value = "冰朔要求区分企业服务器现行、可归档和可删除对象，将归档迁移到企业备用服务器并释放主服务器资源；随后用截图纠正企业备用节点为上海QY-LH-MAIN-PROD-01。"; }
|
||
observation { value = "企业主机历史目录、轮转日志与脱敏旧服务共形成三份归档，在QY-LH-MAIN-PROD-01恢复核验20944个历史文件和39个journal文件；企业主机释放5156704256字节，退役旧3910/5001/8922服务，清理缓存、Docker build cache、未挂载卷和disabled snap；八个公网端点保持HTTP 200。"; }
|
||
emergence { value = "先误把BS-SG-003当企业备用节点 → 冰朔截图纠正 → 停止且确认未写入BS-SG-003 → 验明QY-LH-MAIN-PROD-01 → 进程、Nginx、容器、systemd和哈希联合分类 → 先归档与恢复验证 → 再删除源和清缓存 → 修复当前Docker blue开机重启策略并禁用旧systemd候选。"; }
|
||
lock { value = "primary=GH-CVM-MAIN-PROD-01; backup=QY-LH-MAIN-PROD-01; backup_root=/home/guanghu-ops/enterprise-archive/GH-CVM-MAIN-PROD-01/2026-09-13; source_receipt_sha256=bb311523d9ba6b0ae8b382f9bb54db2de8158cbe053e9b8cb2048b328c090f09; backup_receipt_sha256=2f825548e7c46ec27d0fbfd8340f026cbcc9448daf447f3c7045012f5b3d6604; freed_bytes=5156704256; current_blue_restart=unless-stopped; legacy_systemd_candidate=disabled"; }
|
||
why { value = "让企业主机只保留仍被现实运行链引用的对象，同时把历史证据放入企业自己的备用节点；恢复演练和公网复测确保清理不是靠目录名猜测。"; }
|
||
rejected { values = ["把BS-SG-003当企业备用服务器", "归档未验证就删源", "删除Nginx仍引用的双Forgejo", "删除救援脚本仍引用的创世前备份", "明文归档旧服务硬编码秘密", "手工删除活动containerd快照"] ; }
|
||
evidence { backup_correction_sha256 = "222b097b7d846cdbe3120b4f1104ba668236d4ecd87253e78d3d2a18f086f915"; backup_screenshot_sha256 = "b1cefe68e8e75971919506c1e511c78935f9e3d4ef21e2174add01e44be6c4a7"; historical_archive_sha256 = "ec63d093654e010e63d7b7ac69739d13c1717355f0f87c83a14143afe08f9077"; journal_archive_sha256 = "5c644d21d4c1cd48d714b613469acab6e0dcd6d8ffaff4c593281ec9a7a04af7"; legacy_redacted_archive_sha256 = "fe4b846bc1a8ef57873c63211ccf481055f43e33ae5c491a4db58e9e7e074e3e"; }
|
||
}
|