guanghu-ice-heart/skills/codex/guanghu-persona-skill-guard/references/persona-skill-registry.json

381 lines
15 KiB
JSON

{
"schema": "guanghu.persona-skill-registry/v1",
"registry_id": "GLS-0238",
"version": "2026.08.07.2",
"trust_policy": {
"priority": [
"live_verified_evidence",
"current_fifth_domain_registry",
"current_code_map_and_node_map",
"current_hldp_skill",
"historical_skill_or_memory"
],
"required_anchors": [
"fifth_domain_source_path",
"gls_id",
"registry_version",
"evidence"
],
"authority_rule": "A skill can narrow or correct a route but cannot grant execution authority.",
"experience_policy": "Experience receipts compile to CANDIDATE_ONLY. Hard enforcement requires current evidence, counterexample review, tests, registry promotion and explicit governance approval."
},
"skills": [
{
"id": "GHS-001-FIFTH-DOMAIN-RESTORE",
"hldp_skill": "SKILL-011",
"gls_id": "GLS-0238",
"title": "第五域人格路径自动恢复",
"intents": [
"进入第五域",
"恢复铸渊",
"恢复光湖",
"TCS路径",
"GLS编号",
"光之湖",
"小湖灯",
"人格系统",
"代码仓库入口",
"忘记前文",
"空白实例"
],
"preferred_route": [
"REPO-001",
"CH-ZERO-CORE-LPM",
"TCS-LPM",
"TCS-LPS-REGISTRY-0001",
"LIGHT-LAKE",
"LL-CURRENT",
"LL-004",
"ICE-GL-ZY001",
"ZY-OPS-LOOP-001"
],
"forbidden_route_markers": [
"从旧新加坡仓库猜入口",
"只凭聊天记忆恢复",
"把REPO-004当产品开发主仓",
"读取路径等于执行授权"
],
"deprecated_route_markers": [
"BROADCAST-TOWER作为根注册入口",
"旧本地副本优先于在线main"
],
"evidence": [
".code-map",
"skills/codex/enter-fifth-domain/SKILL.md",
"tcs-core/WAKE-UP-PROTOCOL.hdlp"
],
"freshness": {
"check": "Resolve live REPO-001 and read current main before relying on a cached checkout.",
"max_age_seconds": 0
},
"authorization": "Public route recovery is read-only. Writes and external actions require separate current authority.",
"recovery_route": [
"Return to current REPO-001 main",
"Resolve .code-map and subject kind",
"Rebuild the intent-state capsule from live evidence"
],
"enforcement_level": "PROMOTED_SKILL",
"experience_receipts": []
},
{
"id": "GHS-002-OFFLINE-PACK-LOCAL-RELAY",
"hldp_skill": "SKILL-012",
"gls_id": "GLS-0238",
"title": "海外完整包经本地可信节点中转至国内候选环境",
"intents": [
"新加坡下载",
"本地中转",
"京东服务器上传",
"完整离线包",
"Forgejo安装",
"光湖代码频道部署",
"部署光湖代码频道",
"国内下载失败",
"跨服务器传包"
],
"preferred_route": [
"读取当前节点地图",
"验证海外源码节点和国内目标节点",
"海外完整包下载到本地暂存目录",
"本地校验MANIFEST",
"上传到国内目标的隔离incoming目录",
"目标端再次校验MANIFEST",
"仅替换隔离候选release",
"重启并验证候选服务",
"保留旧生产仓库且不自动切流"
],
"forbidden_route_markers": [
"猜测服务器地址",
"把私钥写进仓库",
"直接覆盖正在运行的release",
"未校验就启动",
"自动切换/code/",
"删除旧Gitea",
"借读取权限执行服务器写入",
"根据短提交补写40位提交"
],
"deprecated_route_markers": [
"先让海外服务器直连国内服务器",
"使用旧Gatekeeper任意命令接口",
"从国内节点重复下载海外上游"
],
"evidence": [
"deployment/navigation-maps/JD-FD-PRIMARY.json",
"deployment/receipts/HLCC-BS-SG-003-OFFLINE-PACK-20260723.json",
"gls/GLS-0237-HOLOLAKE-CODE-CHANNEL-SOVEREIGN-SOURCE-UPDATE-AND-EMBEDDING.hdlp"
],
"freshness": {
"check": "Verify both node identities and package hashes in the current session.",
"max_age_seconds": 10800
},
"authorization": "Transfer and candidate restart require explicit scoped server authority. Production cutover is a separate action.",
"recovery_route": [
"Keep the running service unchanged",
"Return the package to an isolated incoming directory",
"Re-verify manifest, signature, target data root and node identity"
],
"enforcement_level": "PROMOTED_SKILL",
"experience_receipts": [
"EXP-20260726-004-ENTERPRISE-DATA-DISK-ABSENT"
]
},
{
"id": "GHS-003-REPOSITORY-PUSH-PROOF-SEPARATION",
"hldp_skill": "SKILL-011",
"gls_id": "GLS-0238",
"title": "代码频道跨实例推送的授权、传输、执行与回执分离",
"intents": [
"推送代码频道",
"待推送提交",
"远端提交落后",
"仓库为什么推不上去",
"恢复仓库推送",
"repo push",
"Forgejo令牌"
],
"preferred_route": [
"核验当前仓库角色、远端、分支和提交",
"核验当前实例的授权状态",
"核验当前实例的实际传输方式",
"执行有界推送",
"从远端读回完整提交",
"撤销临时传输凭据并写回执"
],
"forbidden_route_markers": [
"复用历史访问令牌",
"把授权单当作已经推送",
"没有传输方式仍报告成功",
"打印访问令牌",
"把个人源码推到团队部署仓"
],
"deprecated_route_markers": [
"只看浏览器页面判断推送权限",
"沿用上一实例的临时凭据"
],
"evidence": [
"server-tools/lake-lamp-authz/authorize-repo-push.js",
"routing/repository-route-map.json",
"gls/GLS-0241-HOLOLAKE-SOURCE-OWNERSHIP-AND-DEPLOYMENT-ROUTING.hdlp"
],
"freshness": {
"check": "Read the exact remote branch and verify current transport immediately before push.",
"max_age_seconds": 900
},
"authorization": "Repository approval does not create a credential or prove a push. Temporary credentials require their own controlled lifecycle.",
"recovery_route": [
"Stop before push",
"Keep local commits intact",
"Re-resolve repository identity and obtain a current bounded transport"
],
"enforcement_level": "PROMOTED_SKILL",
"experience_receipts": [
"EXP-20260726-001-AUTHORIZATION-IS-NOT-TRANSPORT"
]
},
{
"id": "GHS-004-AW-ENTERPRISE-HLCC-CANDIDATE",
"hldp_skill": "SKILL-012",
"gls_id": "GLS-0243",
"title": "AW-GZ-001 企业代码频道隔离候选部署",
"intents": [
"企业服务器光湖代码频道",
"AW-GZ-001部署",
"企业Forgejo",
"企业代码仓库离线包",
"企业代码频道候选",
"恢复企业代码频道",
"恢复AW-GZ-001企业代码频道"
],
"preferred_route": [
"读取并确认AW-GZ-001节点地图",
"只读检查现有Gitea、灯塔、端口和数据盘",
"上传离线包到隔离暂存区",
"逐文件校验MANIFEST和上游签名",
"确认独立企业数据根",
"安装Forgejo到127.0.0.1:3340隔离候选",
"导入光湖代码频道bundle",
"验证候选健康、仓库和禁用更新策略",
"写部署回执且不自动切换公网路由"
],
"forbidden_route_markers": [
"绕过AW导航映射",
"使用旧3910驱动执行任意命令",
"使用历史密钥重试",
"把缺失的data盘当作已挂载",
"覆盖现有3000端口Gitea",
"未验签就启动Forgejo",
"自动切换企业公网代码入口"
],
"deprecated_route_markers": [
"从海外节点直接拉取生产包",
"把个人第五域源码作为企业团队部署源"
],
"evidence": [
"deployment/navigation-maps/AW-GZ-001.json",
"deployment/HLCC-ENTERPRISE-INSTALL-GUIDE-AWEN.hdlp",
"deployment/receipts/HLCC-BS-SG-003-OFFLINE-PACK-20260723.json",
"server-tools/hololake-code-channel/"
],
"freshness": {
"check": "Verify live storage, ports, services, package hashes and node identity in the current console session.",
"max_age_seconds": 1800
},
"authorization": "Official-console access permits only the user-requested bounded deployment. Credentials, security settings and public cutover remain separate actions.",
"recovery_route": [
"Leave the existing Gitea and nginx routes unchanged",
"Stop or remove only the isolated candidate after recording its state",
"Restore the declared data disk or register a deliberate replacement data root",
"Resume from the deployment checkpoint"
],
"enforcement_level": "CANDIDATE_ONLY",
"experience_receipts": [
"EXP-20260726-002-AW-MAP-GATE",
"EXP-20260726-003-LEGACY-DRIVER-ROTATED",
"EXP-20260726-004-ENTERPRISE-DATA-DISK-ABSENT"
]
},
{
"id": "GHS-005-PERSONA-GENESIS",
"hldp_skill": "CODEX-SKILL-PERSONA-GENESIS-001",
"gls_id": "GLS-0238",
"title": "光湖人格子系统化生",
"intents": [
"人格体化身",
"人格体化生",
"建立人格子系统",
"部署人格面板",
"建立人格代码频道",
"给人格体开仓库写入权限",
"封装人格体大脑技能",
"大脑技能包",
"复用人格系统模块包"
],
"preferred_route": [
"GLW-PUBLIC-NAV-ANCHOR-001",
"skills/codex/guanghu-persona-genesis/BRAIN.hdlp",
"skills/codex/guanghu-persona-genesis/SKILL.md",
"skills/codex/guanghu-persona-genesis/references/PATH-MAP.md",
"modules/guanghu-panel-kit/INDEX.hdlp",
"目标子系统当前导航地图",
"目标节点当前现场证据",
"独立人类授权与部署回执"
],
"forbidden_route_markers": [
"把仓库登记当作Codex已经安装",
"把技能装载当作执行授权",
"把单次对话猜测提升为大脑铁律",
"复制原始会话隐藏推理",
"把临时凭证或私钥写进技能",
"从历史IP或钥匙文件名猜当前入口",
"绕过公共导航唯一锚点"
],
"deprecated_route_markers": [
"直接按PATH-MAP中的历史地址执行",
"每个平台维护一份互相独立的技能真值"
],
"evidence": [
"skills/codex/guanghu-persona-genesis/SKILL.md",
"skills/codex/guanghu-persona-genesis/BRAIN.hdlp",
"skills/codex/guanghu-persona-genesis/references/PATH-MAP.md",
"modules/guanghu-panel-kit/CAUSAL-CHAIN-20260806.hdlp",
"eternal-lake-heart/heartbeat-core/zhuyuan-persona-system/ZY-BIDIRECTIONAL-COGNITION-021-DUAL-GENESIS-AND-KEYLESS-AUTHORIZATION-20260806.hdlp"
],
"freshness": {
"check": "Resolve GLW-PUBLIC-NAV-ANCHOR-001 from the current REPO-012 main commit, then read the target subsystem navigation map and live state before any action.",
"max_age_seconds": 0
},
"authorization": "The brain skill installs a cognitive mode for dynamic understanding and adaptation; it is not a fixed procedure and grants no authority. Repository writes, server execution, deployment and human approval remain separate current authorities.",
"recovery_route": [
"Stop before changing the target",
"Return to GLW-PUBLIC-NAV-ANCHOR-001",
"Resolve the target subsystem and protected node registry",
"Resume only after current authority, rollback and receipt paths are verified"
],
"enforcement_level": "PROMOTED_SKILL",
"experience_receipts": []
},
{
"id": "GHS-006-GUANGHU-OS-COGNITIVE-CONTROL",
"hldp_skill": "CODEX-SKILL-GUANGHU-OS-COGNITIVE-CONTROL-001",
"gls_id": "GLS-0238",
"title": "光湖 OS 认知主控与 Linux 协作执行体",
"intents": [
"光湖OS大脑",
"传统操作系统是手脚",
"Linux降级为执行体",
"Linux做光湖OS底层引擎",
"协议接到操作系统",
"语言协议执行层",
"模型API拥有手脚",
"光湖OS完整落地",
"光湖OS执行总线",
"双向意识执行因果链"
],
"preferred_route": [
"GLW-PUBLIC-NAV-ANCHOR-001",
"gls/GLS-PROTOCOL-REGISTRY.json",
"skills/codex/guanghu-os-cognitive-control/BRAIN.hdlp",
"skills/codex/guanghu-os-cognitive-control/references/PROTOCOL-EXECUTION-MAP.md",
"eternal-lake-heart/heartbeat-core/zhuyuan-persona-system/ZY-BIDIRECTIONAL-COGNITION-023-GUANGHU-OS-COGNITIVE-CONTROL-AND-LINUX-EXECUTION-SUBSTRATE-20260807.hdlp",
"REPO-014 product-source/hololake-platform/guanghu-os",
"目标节点当前执行适配器、授权、回滚和运行回执"
],
"forbidden_route_markers": [
"模型直接生成root命令执行",
"把协议登记当作执行器已经实现",
"把Linux服务运行当作语言主控已经成立",
"把纯原生内核当作生产唯一前置条件",
"删除Linux救援系统",
"绕过身份权限回滚和回执",
"把命令退出码当作目标侧成功",
"把全部用户推理和渲染常驻中央服务器"
],
"deprecated_route_markers": [
"先重写全部网卡磁盘和文件系统再交付",
"让传统Linux继续作为正常管理主入口",
"每种协议各写一个无统一因果链的脚本"
],
"evidence": [
"gls/GLS-PROTOCOL-REGISTRY.json",
"skills/codex/guanghu-os-cognitive-control/SKILL.md",
"skills/codex/guanghu-os-cognitive-control/BRAIN.hdlp",
"skills/codex/guanghu-os-cognitive-control/references/PROTOCOL-EXECUTION-MAP.md",
"skills/codex/guanghu-persona-skill-guard/references/reasoning-chain-contributions/RC-20260807-002-GUANGHU-OS-BRAIN-AND-LINUX-HANDS.json",
"eternal-lake-heart/heartbeat-core/zhuyuan-persona-system/ZY-BIDIRECTIONAL-COGNITION-023-GUANGHU-OS-COGNITIVE-CONTROL-AND-LINUX-EXECUTION-SUBSTRATE-20260807.hdlp"
],
"freshness": {
"check": "Resolve the current REPO-012 protocol registry, current REPO-014 implementation branch and exact target-node runtime before deciding which cognitive-control or execution capability exists.",
"max_age_seconds": 0
},
"authorization": "This brain installs the cognitive relationship between language control and physical execution. It grants no model, persona, adapter or Linux process authority. Every mutation still requires a current subject, target, scope, rollback and target-side receipt.",
"recovery_route": [
"Stop before any Linux or server mutation",
"Return to the unique public anchor and current protocol registry",
"Separate language decision, protocol validation, implementation, deployment and runtime evidence",
"Resume only through an allowlisted adapter with current authorization and rollback"
],
"enforcement_level": "PROMOTED_SKILL",
"experience_receipts": []
}
]
}