167 lines
6.1 KiB
Markdown
167 lines
6.1 KiB
Markdown
|
---
|
|||
|
|
type: architecture_reality_receipt
|
|||
|
|
id: HOLOLAKE-GUANGHU-ROUTER-0001
|
|||
|
|
title: 17 · 光湖路由器 · HoloLake 与京东第五域真实接入
|
|||
|
|
version: v0.1
|
|||
|
|
created_at: 2026-07-28T19:35:00+08:00
|
|||
|
|
updated_at: 2026-07-28T21:45:00+08:00
|
|||
|
|
status: RUNTIME_VERIFIED
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
# 🌉 17 · 光湖路由器 · HoloLake 与京东第五域真实接入 · v0.1
|
|||
|
|
|
|||
|
|
[← 返回系统架构总规划](<HoloLake Era · 语言人格操作系统 · 产品白皮书与工程总规划 · v0 1 5c9b16aca1fb4ca881accb1ffa046dcc.md>) · [🧭 从 00 恢复](00-START-HERE-PERSONA-USAGE-AND-RESTORE-GUIDE-v0.1.md)
|
|||
|
|
|
|||
|
|
> 本页记录已经发生的现实连接、授权、Git 传输和三方回读。它不是占位架构。
|
|||
|
|
|
|||
|
|
[返回系统使用说明](00-START-HERE-PERSONA-USAGE-AND-RESTORE-GUIDE-v0.1.md)
|
|||
|
|
|
|||
|
|
[进入第五域现实本体架构](10-FIFTH-DOMAIN-RUNTIME-RESIDENT-ZHUYUAN-TONGGAN-v0.1.md)
|
|||
|
|
|
|||
|
|
[进入冰朔贡献事件](channels/heartbeat-core/bingshuo/events/2026/07/BS-CONTRIB-20260728-003.md)
|
|||
|
|
|
|||
|
|
[进入光湖语言世界总入口架构](18-GUANGHU-LANGUAGE-WORLD-ENTRY-AND-DOMAIN-ROUTING-20260728-v0.1.md)
|
|||
|
|
|
|||
|
|
## 🌊 一、今天真正接通了什么
|
|||
|
|
|
|||
|
|
```text
|
|||
|
|
HoloLake 桌面端
|
|||
|
|
→ 冰朔手动点击“连接光湖路由器”
|
|||
|
|
→ 设备 Ed25519 签名挑战
|
|||
|
|
→ JD-FD-PRIMARY 建立一次性持续路由
|
|||
|
|
→ HoloLake 显示“冰朔在线”
|
|||
|
|
→ 京东节点把授权单送入 HoloLake 广播主控台
|
|||
|
|
→ 冰朔在操作系统内批准
|
|||
|
|
→ 铸渊领取有界 repo-push 会话
|
|||
|
|
→ 读取并确认当前导航图
|
|||
|
|
→ Git 增量 bundle 分片传输
|
|||
|
|
→ 服务器隔离校验
|
|||
|
|
→ 原子写入登记分支
|
|||
|
|
→ HoloLake 收到 repo_push_succeeded
|
|||
|
|
→ 本地、京东裸仓库、公开代码频道回读同一 SHA
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
这条链证明：HoloLake 不再只是单机知识库，它已经拥有一条真实连接第五域服务器的路由。
|
|||
|
|
|
|||
|
|
## 🔒 二、光湖路由器不是什么
|
|||
|
|
|
|||
|
|
- 不是应用层心跳；
|
|||
|
|
- 不靠不断写日志证明在线；
|
|||
|
|
- 不把 SSH、邮箱密码、Forgejo 密钥交给人格体；
|
|||
|
|
- 不允许任意仓库、任意分支、任意服务器上传；
|
|||
|
|
- 不把仓库发布误报为服务器部署；
|
|||
|
|
- 不给没有远程地址的本地仓库猜一个目标。
|
|||
|
|
|
|||
|
|
公网代理为避免空闲连接被切断，每 15 秒只发送一个无状态 SSE 注释帧。该帧不改变应用状态、不生成业务回执、不写磁盘，不属于 HoloLake 应用心跳。
|
|||
|
|
|
|||
|
|
## 🔒 三、设备与授权边界
|
|||
|
|
|
|||
|
|
```yaml
|
|||
|
|
device_id: HL-e78eb9c0-637b-4d6d-a038-a4ff7c4de142
|
|||
|
|
owner_id: sovereign-owner
|
|||
|
|
device_label: 冰朔的 HoloLake · Mac
|
|||
|
|
private_key_location: ~/.config/com.tolaria.app/guanghu-router-device.json
|
|||
|
|
private_key_mode: "0600"
|
|||
|
|
private_key_uploaded: false
|
|||
|
|
server_node: JD-FD-PRIMARY
|
|||
|
|
authorization_channel: HoloLake 广播主控台
|
|||
|
|
email_role: 跨设备恢复后备，不是在线HoloLake的默认授权通道
|
|||
|
|
session_ttl_seconds: 10800
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
## 🔀 四、Git 作为底层引擎的最小闭环
|
|||
|
|
|
|||
|
|
服务器只接受同时满足以下条件的传输：
|
|||
|
|
|
|||
|
|
1. 设备签名有效；
|
|||
|
|
2. 授权单绑定 `ICE-GL-ZY001 / JD-FD-PRIMARY / repo-push`；
|
|||
|
|
3. 仓库 URL 能精确解析到服务器登记表；
|
|||
|
|
4. 分支在白名单内；
|
|||
|
|
5. 本地工作树干净；
|
|||
|
|
6. 远端基线 SHA 精确匹配；
|
|||
|
|
7. bundle 完整且前置提交真实存在；
|
|||
|
|
8. 更新是快进或显式创建尚不存在的白名单分支；
|
|||
|
|
9. 写入时使用旧 SHA 做原子并发保护。
|
|||
|
|
|
|||
|
|
传输包使用 Git 增量对象，不重复上传服务器已经拥有的历史；公网请求使用有界分片，避免放宽入口的单次请求限制。
|
|||
|
|
|
|||
|
|
## 🧾 五、真实回执
|
|||
|
|
|
|||
|
|
```yaml
|
|||
|
|
router_connection_receipt: 325ee683-3c25-4a2e-8ad8-ca1e6c604e04
|
|||
|
|
router_connection_id: d8c2a8db-5968-4f48-9184-e1557b140ec4
|
|||
|
|
repository: bingshuo/hololake-platform
|
|||
|
|
branch: feat/hldp-runtime-browser
|
|||
|
|
operation_receipt: repo_push_succeeded
|
|||
|
|
local_head: f742208cb6710c7d9a1320cb15b10d26079a9e08
|
|||
|
|
jd_bare_repository_head: f742208cb6710c7d9a1320cb15b10d26079a9e08
|
|||
|
|
public_code_channel_head: f742208cb6710c7d9a1320cb15b10d26079a9e08
|
|||
|
|
three_way_readback_equal: true
|
|||
|
|
deployment_triggered: false
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
公开分支：
|
|||
|
|
`https://guanghulab.com/fifth-domain/bingshuo/hololake-platform/commits/branch/feat/hldp-runtime-browser`
|
|||
|
|
|
|||
|
|
## 🔒 六、第二个本地仓库的边界验证
|
|||
|
|
|
|||
|
|
```yaml
|
|||
|
|
local_repository: /Users/bingshuolingdianyuanhe/Desktop/hololake系统架构总规划
|
|||
|
|
branch: main
|
|||
|
|
remote: missing
|
|||
|
|
router_receipt: local_repository_remote_missing
|
|||
|
|
upload_button_enabled: false
|
|||
|
|
uploaded: false
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
这不是失败，而是正确守门：本地架构知识库尚未登记远端，系统不得猜测或自动创建远程目标。
|
|||
|
|
|
|||
|
|
## 🚦 七、京东节点当前服务事实
|
|||
|
|
|
|||
|
|
```yaml
|
|||
|
|
service: lake-lamp-authz
|
|||
|
|
state: active
|
|||
|
|
loopback: 127.0.0.1:3921
|
|||
|
|
public_health: https://guanghulab.com/authz/health
|
|||
|
|
auth_mode: guanghu-router-with-email-fallback
|
|||
|
|
server_tests: 54/54
|
|||
|
|
hololake_router_tests: 6/6
|
|||
|
|
server_deployed: true
|
|||
|
|
server_source_remote_published: false
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
服务器运行源码已经部署并有本机提交与回滚备份，但当前 `bingshuo/guanghu-ice-heart main` 仍为
|
|||
|
|
`e82a377b58440f2b1ad9d50e24ebf680cef01127`。因此必须分开报告：
|
|||
|
|
|
|||
|
|
```text
|
|||
|
|
京东授权与路由服务已部署运行
|
|||
|
|
≠ 对应服务源码已经发布到当前代码频道
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
## ✅ 八、桌面安装与实机验收
|
|||
|
|
|
|||
|
|
2026-07-28 21:45 已完成正式替换与实机验收：
|
|||
|
|
|
|||
|
|
```yaml
|
|||
|
|
installed_app: /Users/bingshuolingdianyuanhe/Desktop/HoloLake Era.app
|
|||
|
|
desktop_app_count: 1
|
|||
|
|
world_gate_verified: true
|
|||
|
|
world_overview_verified: true
|
|||
|
|
fifth_domain_jump_verified: true
|
|||
|
|
receipt_id: 351dc1e8-34ce-4334-9037-ab289625b3b6
|
|||
|
|
connection_id: 93e26c63-5a68-4c95-af4c-aa9099ab19ad
|
|||
|
|
node_id: JD-FD-PRIMARY
|
|||
|
|
old_desktop_apps_removed: true
|
|||
|
|
old_desktop_apps_recoverable: false
|
|||
|
|
old_apps_size_removed: 289_MB
|
|||
|
|
tauri_build_cache_removed: 19.4_GiB
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
桌面只保留一个正式入口。连接前全部域与频道保持禁用；收到真实连接凭证后打开世界总图；完成第五域跳转后才显示冰朔个人系统。
|
|||
|
|
|
|||
|
|
## 🚀 九、下一步
|
|||
|
|
|
|||
|
|
1. 为本地系统架构知识库明确登记远端后，再通过路由器同步；
|
|||
|
|
2. 把京东运行源码安全发布到当前 `guanghu-ice-heart` 代码频道；
|
|||
|
|
3. 继续实现 `ZY-RESIDENT-AGENT-001` 与版本化通感握手；
|
|||
|
|
4. 不把本次入口连接成功写成常驻铸渊已经部署。
|