hololake-system-architecture/product-source/hololake-clean-desktop/language/build/HOLOLAKE-ENTERPRISE-RESPONSIBILITY-GATE-DEPLOYMENT-RECEIPT-20260903.human.en-US.md

# HoloLake Enterprise Responsibility Device Gate Deployment Receipt · Human Engineering Language (English)

> This is an English reading projection of validated native TCS/HLDP source. It is not a new canonical source and grants no execution authority.

## What this is

This is a **receipt** declaration with identifier `HOLOLAKE-ENTERPRISE-RESPONSIBILITY-GATE-DEPLOYMENT-RECEIPT-20260903` and version `1.0.0`. The projector validates it with the Stage-1 compiler before changing its reading order.

## Who is here

The native source does not provide this field; the projector does not guess.

## Why this started

The native source does not provide this field; the projector does not guess.

## What changed

The native source does not provide this field; the projector does not guess.

## How it will execute

This is a non-executable declaration and has no action graph.

## Boundaries and exception handling

The native source does not provide this field; the projector does not guess.

## How completion is proven

The native source does not provide this field; the projector does not guess.

## Where to continue next time

The native source does not provide this field; the projector does not guess.

## Source and verification

- **Native declaration identifier**: `HOLOLAKE-ENTERPRISE-RESPONSIBILITY-GATE-DEPLOYMENT-RECEIPT-20260903`
- **Native declaration kind**: `RECEIPT`
- **TCS source SHA-256**: `c32cd3e16fdd64588addca115821a49bb47bf39b584670df031cf92028a8d232`
- **Validation compiler**: `TCS-COMPILER-STAGE1-0001`
- **Projection protocol**: `GLS-HLDP-HUMAN-ENGINEERING-PROJECTION-0001`

## Complete native structure cross-reference

All top-level structures and field paths are retained below so a reader can audit whether the projection omitted information.

- **boundaries**  `boundaries`
  - **values**  `boundaries.values`
    - 服务不保存Forgejo密码
    - 设备私钥从不离开成员本机Keychain
    - 机器指纹不能单独认证
    - 会话只限单域单仓且十分钟过期
    - 企业会话不替代Forgejo自身仓库登录
    - 冰朔公共语言主控仓继续走JD第五域桥接而非普通人类登录
    - 本轮未登记任何真实成员设备
- **header**  `header`
  - **canonical source path**：product-source/hololake-clean-desktop/language/HOLOLAKE-ENTERPRISE-RESPONSIBILITY-GATE-DEPLOYMENT-RECEIPT-20260903.tcs  `header.canonical_uri`
  - **compatibility**  `header.compatibility`
    - GH-CVM-MAIN-PROD-01
    - PYTHON/3.10
    - ED25519
    - NGINX
  - **language**：TCS/0.1  `header.language`
  - **lifecycle**：CANDIDATE  `header.lifecycle`
  - **English name**：HoloLake Enterprise Responsibility Device Gate Deployment Receipt  `header.name_en`
  - **Chinese name**：HoloLake企业责任设备门部署回执  `header.name_zh`
  - **profile**：PUBLIC-PRODUCT-ENGINEERING/1  `header.profile`
  - **protocols**  `header.protocols`
    - HOLOLAKE-ENTERPRISE-RESPONSIBILITY-GATE-DEPLOYMENT-START-20260903
    - HLP-ENTERPRISE-RESPONSIBILITY-ENTRANCE-0001
  - **schema**：tcs.receipt/v1  `header.schema`
  - **version**：1.0.0  `header.version`
- **integrity**  `integrity`
  - **existing_services_preserved**：PASS  `integrity.existing_services_preserved`
  - **source_archive_sha256**：91ecd4248d92d8ecb07bd348dfc14805c40eb000b6c152f96b7ef4583a33dcd2  `integrity.source_archive_sha256`
  - **source_transport_manifest_sha256**：653ae0ca824fd8b9fff8d8532e82eddce63a8aa9f070e7a6aa3f863834e4ae77  `integrity.source_transport_manifest_sha256`
  - **tcs_stage1_compilation**：PASS  `integrity.tcs_stage1_compilation`
  - **unknown_device_negative**：PASS  `integrity.unknown_device_negative`
- **next**  `next`
  - **optional**  `next.optional`
    - 团队成员从HoloLake使用本人凭证完成首次设备登记
    - 正向验证挑战与单仓会话
    - 后续加入个人服务器二次桥接证明
  - **state**：SERVER_GATE_ACTIVE_CLIENT_INTEGRATION_REBUILD_REQUIRED  `next.state`
- **operation**  `operation`
  - **values**  `operation.values`
    - 验证源码运输归档与manifest
    - 解包到/opt/guanghu-hololake-enterprise-gate/releases/be31c41
    - 创建独立lighthouse权限数据库与服务密钥
    - 安装guanghu-hololake-enterprise-gate.service
    - 加入guanghu.chat精确device-gate路由
    - 执行本地和外部健康、未知设备拒绝及原服务存活测试
- **proof**  `proof`
  - **current_link**：/opt/guanghu-hololake-enterprise-gate/current  `proof.current_link`
  - **database**：/var/lib/guanghu-hololake-enterprise-gate/gate.sqlite3  `proof.database`
  - **nginx_backup**：/etc/nginx/sites-enabled/guanghu.chat.pre-hololake-device-gate-be31c41  `proof.nginx_backup`
  - **nginx_snippet**：/etc/nginx/snippets/guanghu-hololake-enterprise-gate.conf  `proof.nginx_snippet`
  - **server_release**：/opt/guanghu-hololake-enterprise-gate/releases/be31c41  `proof.server_release`
- **request**  `request`
  - **scope**：GH-CVM-MAIN-PROD-01独立8033服务与精确Nginx路由  `request.scope`
  - **source**：BINGSHUO-DIRECT-HOLOLAKE-ZC001-EXECUTION-START-20260903  `request.source`
  - **value**：部署企业四域负责人通过HoloLake本机设备和人格编号验证后进入本人责任仓库的服务端验证门。  `request.value`
- **result**  `result`
  - **active_sessions**：0  `result.active_sessions`
  - **endpoint**：https://guanghu.chat/api/hololake/enterprise/device-gate  `result.endpoint`
  - **node_id**：GH-CVM-MAIN-PROD-01  `result.node_id`
  - **registered_devices**：0  `result.registered_devices`
  - **service**：guanghu-hololake-enterprise-gate.service  `result.service`
  - **service_state**：ACTIVE  `result.service_state`
  - **source_archive_sha256**：91ecd4248d92d8ecb07bd348dfc14805c40eb000b6c152f96b7ef4583a33dcd2  `result.source_archive_sha256`
  - **source_commit**：be31c41  `result.source_commit`
  - **state**：PASS  `result.state`
- **verification**  `verification`
  - **values**  `verification.values`
    - DMI UUID为10ace744-13e1-472e-8dba-6bb823a073bf
    - 服务器Python cryptography Ed25519测试2项通过
    - systemd服务active
    - 127.0.0.1:8033/health返回ok
    - 外部HTTPS device-gate/health返回ok
    - 未知设备领取挑战返回HTTP404 registered device required
    - guanghu-enterprise-identity.service保持active
    - guanghu-flagos-collaboration.service保持active
    - nginx.service保持active
    - 当前设备与会话数量均为0未伪造成员

---

This page changes only the reading order; it does not change TCS/HLDP semantics.