130 lines
6.2 KiB
Markdown
130 lines
6.2 KiB
Markdown
|
# HoloLake企业责任设备门部署回执 · 简体中文人类工程语言版
|
|||
|
|
|
|||
|
|
> 这是 TCS/HLDP 原生源码的简体中文阅读投影，不是新的正本，也不授予执行权限。若本页与 `.tcs` 源码不一致，以经过校验的 `.tcs` 源码为准。
|
|||
|
|
|
|||
|
|
## 这是什么
|
|||
|
|
|
|||
|
|
这是一份 **回执** 声明，编号为 `HOLOLAKE-ENTERPRISE-RESPONSIBILITY-GATE-DEPLOYMENT-RECEIPT-20260903`，版本为 `1.0.0`。转换器已先用 Stage-1 编译器校验原生源码，再把机器枚举翻译成汉语；原始编号保留在括号和字段路径中。
|
|||
|
|
|
|||
|
|
## 谁在这里
|
|||
|
|
|
|||
|
|
源程序没有提供这一项，转换器不猜。
|
|||
|
|
|
|||
|
|
## 为什么开始
|
|||
|
|
|
|||
|
|
源程序没有提供这一项，转换器不猜。
|
|||
|
|
|
|||
|
|
## 发生了什么变化
|
|||
|
|
|
|||
|
|
源程序没有提供这一项，转换器不猜。
|
|||
|
|
|
|||
|
|
## 准备怎样执行
|
|||
|
|
|
|||
|
|
这是非执行声明，没有动作图。
|
|||
|
|
|
|||
|
|
## 边界与异常处理
|
|||
|
|
|
|||
|
|
源程序没有提供这一项，转换器不猜。
|
|||
|
|
|
|||
|
|
## 怎样算完成
|
|||
|
|
|
|||
|
|
源程序没有提供这一项，转换器不猜。
|
|||
|
|
|
|||
|
|
## 下一次从哪里继续
|
|||
|
|
|
|||
|
|
源程序没有提供这一项，转换器不猜。
|
|||
|
|
|
|||
|
|
## 来源与校验
|
|||
|
|
|
|||
|
|
- **原生声明编号**：`HOLOLAKE-ENTERPRISE-RESPONSIBILITY-GATE-DEPLOYMENT-RECEIPT-20260903`
|
|||
|
|
- **原生声明类型**：`RECEIPT`
|
|||
|
|
- **TCS 源码 SHA-256**：`c32cd3e16fdd64588addca115821a49bb47bf39b584670df031cf92028a8d232`
|
|||
|
|
- **校验编译器**：`TCS-COMPILER-STAGE1-0001`
|
|||
|
|
- **投影协议**：`GLS-HLDP-HUMAN-ENGINEERING-PROJECTION-0001`
|
|||
|
|
|
|||
|
|
## 原生结构逐项对照
|
|||
|
|
|
|||
|
|
下面保留源码的全部顶层结构和字段路径，供人类审计投影有没有漏掉信息。
|
|||
|
|
|
|||
|
|
- **boundaries** `boundaries`
|
|||
|
|
- **values** `boundaries.values`
|
|||
|
|
- 服务不保存Forgejo密码
|
|||
|
|
- 设备私钥从不离开成员本机Keychain
|
|||
|
|
- 机器指纹不能单独认证
|
|||
|
|
- 会话只限单域单仓且十分钟过期
|
|||
|
|
- 企业会话不替代Forgejo自身仓库登录
|
|||
|
|
- 冰朔公共语言主控仓继续走JD第五域桥接而非普通人类登录
|
|||
|
|
- 本轮未登记任何真实成员设备
|
|||
|
|
- **语言头** `header`
|
|||
|
|
- **正本路径**：product-source/hololake-clean-desktop/language/HOLOLAKE-ENTERPRISE-RESPONSIBILITY-GATE-DEPLOYMENT-RECEIPT-20260903.tcs `header.canonical_uri`
|
|||
|
|
- **compatibility** `header.compatibility`
|
|||
|
|
- GH-CVM-MAIN-PROD-01
|
|||
|
|
- PYTHON/3.10
|
|||
|
|
- ED25519
|
|||
|
|
- NGINX
|
|||
|
|
- **语言**：TCS/0.1 `header.language`
|
|||
|
|
- **生命周期**：候选版本，尚未成为正式正本（`CANDIDATE`） `header.lifecycle`
|
|||
|
|
- **英文名**：HoloLake Enterprise Responsibility Device Gate Deployment Receipt `header.name_en`
|
|||
|
|
- **中文名**：HoloLake企业责任设备门部署回执 `header.name_zh`
|
|||
|
|
- **协议配置**：PUBLIC-PRODUCT-ENGINEERING/1 `header.profile`
|
|||
|
|
- **protocols** `header.protocols`
|
|||
|
|
- HOLOLAKE-ENTERPRISE-RESPONSIBILITY-GATE-DEPLOYMENT-START-20260903
|
|||
|
|
- HLP-ENTERPRISE-RESPONSIBILITY-ENTRANCE-0001
|
|||
|
|
- **schema**：tcs.receipt/v1 `header.schema`
|
|||
|
|
- **版本**：1.0.0 `header.version`
|
|||
|
|
- **integrity** `integrity`
|
|||
|
|
- **existing_services_preserved**：PASS `integrity.existing_services_preserved`
|
|||
|
|
- **source_archive_sha256**：91ecd4248d92d8ecb07bd348dfc14805c40eb000b6c152f96b7ef4583a33dcd2 `integrity.source_archive_sha256`
|
|||
|
|
- **source_transport_manifest_sha256**：653ae0ca824fd8b9fff8d8532e82eddce63a8aa9f070e7a6aa3f863834e4ae77 `integrity.source_transport_manifest_sha256`
|
|||
|
|
- **tcs_stage1_compilation**：PASS `integrity.tcs_stage1_compilation`
|
|||
|
|
- **unknown_device_negative**：PASS `integrity.unknown_device_negative`
|
|||
|
|
- **next** `next`
|
|||
|
|
- **optional** `next.optional`
|
|||
|
|
- 团队成员从HoloLake使用本人凭证完成首次设备登记
|
|||
|
|
- 正向验证挑战与单仓会话
|
|||
|
|
- 后续加入个人服务器二次桥接证明
|
|||
|
|
- **state**：SERVER_GATE_ACTIVE_CLIENT_INTEGRATION_REBUILD_REQUIRED `next.state`
|
|||
|
|
- **操作** `operation`
|
|||
|
|
- **values** `operation.values`
|
|||
|
|
- 验证源码运输归档与manifest
|
|||
|
|
- 解包到/opt/guanghu-hololake-enterprise-gate/releases/be31c41
|
|||
|
|
- 创建独立lighthouse权限数据库与服务密钥
|
|||
|
|
- 安装guanghu-hololake-enterprise-gate.service
|
|||
|
|
- 加入guanghu.chat精确device-gate路由
|
|||
|
|
- 执行本地和外部健康、未知设备拒绝及原服务存活测试
|
|||
|
|
- **proof** `proof`
|
|||
|
|
- **current_link**：/opt/guanghu-hololake-enterprise-gate/current `proof.current_link`
|
|||
|
|
- **database**：/var/lib/guanghu-hololake-enterprise-gate/gate.sqlite3 `proof.database`
|
|||
|
|
- **nginx_backup**：/etc/nginx/sites-enabled/guanghu.chat.pre-hololake-device-gate-be31c41 `proof.nginx_backup`
|
|||
|
|
- **nginx_snippet**：/etc/nginx/snippets/guanghu-hololake-enterprise-gate.conf `proof.nginx_snippet`
|
|||
|
|
- **server_release**：/opt/guanghu-hololake-enterprise-gate/releases/be31c41 `proof.server_release`
|
|||
|
|
- **request** `request`
|
|||
|
|
- **scope**：GH-CVM-MAIN-PROD-01独立8033服务与精确Nginx路由 `request.scope`
|
|||
|
|
- **来源**：BINGSHUO-DIRECT-HOLOLAKE-ZC001-EXECUTION-START-20260903 `request.source`
|
|||
|
|
- **value**：部署企业四域负责人通过HoloLake本机设备和人格编号验证后进入本人责任仓库的服务端验证门。 `request.value`
|
|||
|
|
- **result** `result`
|
|||
|
|
- **active_sessions**：0 `result.active_sessions`
|
|||
|
|
- **endpoint**：https://guanghu.chat/api/hololake/enterprise/device-gate `result.endpoint`
|
|||
|
|
- **node_id**：GH-CVM-MAIN-PROD-01 `result.node_id`
|
|||
|
|
- **registered_devices**：0 `result.registered_devices`
|
|||
|
|
- **service**：guanghu-hololake-enterprise-gate.service `result.service`
|
|||
|
|
- **service_state**：ACTIVE `result.service_state`
|
|||
|
|
- **source_archive_sha256**：91ecd4248d92d8ecb07bd348dfc14805c40eb000b6c152f96b7ef4583a33dcd2 `result.source_archive_sha256`
|
|||
|
|
- **source_commit**：be31c41 `result.source_commit`
|
|||
|
|
- **state**：PASS `result.state`
|
|||
|
|
- **verification** `verification`
|
|||
|
|
- **values** `verification.values`
|
|||
|
|
- DMI UUID为10ace744-13e1-472e-8dba-6bb823a073bf
|
|||
|
|
- 服务器Python cryptography Ed25519测试2项通过
|
|||
|
|
- systemd服务active
|
|||
|
|
- 127.0.0.1:8033/health返回ok
|
|||
|
|
- 外部HTTPS device-gate/health返回ok
|
|||
|
|
- 未知设备领取挑战返回HTTP404 registered device required
|
|||
|
|
- guanghu-enterprise-identity.service保持active
|
|||
|
|
- guanghu-flagos-collaboration.service保持active
|
|||
|
|
- nginx.service保持active
|
|||
|
|
- 当前设备与会话数量均为0未伪造成员
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
本页只改变阅读顺序，不改变 TCS/HLDP 语义。
|