hololake-system-architecture/product-source/hololake-native-desktop/audit/donor-audit.json

{
  "schema": "hololake.donor-audit/v1",
  "record_id": "HLP-DONOR-AUDIT-001",
  "development_id": "DEV-20260811-010",
  "audited_source_commit": "cff488bb033051909ae078991787e0c272a2d5eb",
  "state": "THREE_DONOR_SECURITY_REVIEWS_RECORDED_LICENSE_PROVENANCE_AND_DATA_GATES_ACTIVE",
  "truth_boundary": "This record permits capability and behavior extraction only. It does not authorize donor source copying, donor deletion, data migration, product UI implementation, release, or deployment.",
  "donors": [
    {
      "path": "../hololake-platform",
      "role": "READ_ONLY_ENGINEERING_CAPABILITY_DONOR",
      "source_license": "AGPL-3.0-or-later",
      "declared_authors": ["Luca Rossi"],
      "code_reuse": "BLOCKED_PENDING_FILE_PROVENANCE_AND_PRODUCT_LICENSE_DECISION",
      "security_scan": "FOCUSED_STATIC_REVIEW_COMPLETE_AT_AUDITED_COMMIT",
      "validated_security_findings": [
        "MODEL_TOOL_MUTATIONS_WITHOUT_EXACT_HUMAN_CONFIRMATION",
        "UNAUTHENTICATED_LOOPBACK_MCP_TOOL_BRIDGE",
        "RENDERER_WRITABLE_VAULT_AUTHORIZATION_REGISTRY",
        "UNSCOPED_GIT_AND_RECURSIVE_FOLDER_COMMANDS",
        "VAULT_SCANNERS_FOLLOW_EXTERNAL_SYMLINKS",
        "MODEL_SECRET_NOT_BOUND_TO_APPROVED_ENDPOINT",
        "SAFE_MODE_ADAPTER_ENABLES_ALL_TOOLS",
        "WORKSPACE_CONFIG_SELECTS_HOST_ENVIRONMENT_SECRETS",
        "UNPINNED_RUNTIME_EXTENSION_AND_EXECUTABLE_DISCOVERY"
      ]
    },
    {
      "path": "../hololake-desktop",
      "role": "READ_ONLY_KNOWLEDGE_UX_AND_BEHAVIOR_DONOR",
      "source_license": "UNDECLARED_NO_LICENSE_FILE_OR_PACKAGE_FIELD_FOUND",
      "code_reuse": "BLOCKED_PENDING_OWNERSHIP_AND_FILE_PROVENANCE",
      "security_scan": "COMPLETE_AT_AUDITED_COMMIT",
      "security_scan_id": "b7cae66e-20bb-4110-be9a-205600ed2f39"
    },
    {
      "path": "../guanghu-knowledge-base",
      "role": "READ_ONLY_KNOWLEDGE_UX_BEHAVIOR_AND_DATA_DONOR",
      "source_license": "UNDECLARED_NO_LICENSE_FILE_OR_PACKAGE_FIELD_FOUND",
      "code_reuse": "BLOCKED_PENDING_OWNERSHIP_AND_FILE_PROVENANCE",
      "security_scan": "COMPLETE_AT_AUDITED_COMMIT",
      "security_scan_id": "944b7cb0-fd2b-4310-889f-42062124e155"
    }
  ],
  "capability_dispositions": [
    {"capability":"GH_AIOS_STAGE_ONE_IDENTITY_TASK_EVENT_RECEIPT_KERNEL","disposition":"CLEAN_ROOM_IMPLEMENT","target":"NEW_NATIVE_CONTAINER_FIRST_KERNEL"},
    {"capability":"PROGRAMMING_AI_AND_LANGUAGE_MODEL_CONNECTORS","disposition":"REDESIGN","target":"AUTHENTICATED_CAPABILITY_DECLARED_CONNECTOR_RUNTIME"},
    {"capability":"LAKE_LAMP_MULTI_AI_SHARED_TASK_BOARD","disposition":"KEEP_CONTRACT","target":"EXTERNALIZED_EVENT_CAUSAL_SUMMARY_AND_RECEIPT_PROJECTION"},
    {"capability":"HUMAN_APPROVAL_CENTER","disposition":"REPLACE","target":"EXACT_SIGNED_EXPIRING_PAYLOAD_AND_READBACK"},
    {"capability":"PAGE_FOLDER_TREE_AND_READING_HIERARCHY","disposition":"KEEP_UX_REFERENCE","target":"CLEAN_ROOM_NATIVE_IMPLEMENTATION"},
    {"capability":"MARKDOWN_IMPORT_EXPORT_AND_DURABILITY","disposition":"KEEP_CONTRACT","target":"COLLISION_SAFE_SYMLINK_SAFE_MIGRATION"},
    {"capability":"RICH_BLOCKS_TABLE_CODE_MATH_DIAGRAM_WHITEBOARD_SHEET","disposition":"INVESTIGATE","target":"DEPENDENCY_LICENSE_SECURITY_AND_WEBVIEW_PARITY_GATES"},
    {"capability":"PROPERTIES_FILTER_SORT_AND_DATABASE_VIEWS","disposition":"REDESIGN","target":"HUMAN_FIRST_KNOWLEDGE_SURFACE"},
    {"capability":"SEARCH_BACKLINKS_WIKILINKS_AND_ATTACHMENTS","disposition":"KEEP_CONTRACT","target":"LOCAL_FIRST_BOUNDED_GRAPH"},
    {"capability":"GIT_VERSION_DIFF_RECOVERY_AND_RECEIPTS","disposition":"KEEP_CONTRACT","target":"AUTHENTICATED_EVIDENCE_LAYER_WITH_VALIDATED_PATHS_REVISIONS_AND_REMOTES"},
    {"capability":"AGENT_CHAT_AND_CONFIRMATION","disposition":"REPLACE","target":"AGE_PARTNERSHIP_WITH_AUTHENTICATED_HUMAN_EXACT_IMMUTABLE_PAYLOAD_CONFIRMATION"},
    {"capability":"WORLD_DOMAIN_IDENTITY_AND_NODE_SURFACES","disposition":"HIDE_AS_STAGE_ONE_FOUNDATION","target":"STAGE_TWO_VISIBLE_LANGUAGE_WORLD_NAVIGATION"},
    {"capability":"UPSTREAM_AND_DONOR_UPDATERS","disposition":"RETIRE","target":"HOLOLAKE_SIGNED_HUMAN_OPT_IN_UPDATE_TRUST_ROOT"},
    {"capability":"DEFAULT_TELEMETRY_AND_ERROR_REPORTING","disposition":"INVESTIGATE","target":"OFF_BY_DEFAULT_UNTIL_EXPLICIT_HUMAN_CONSENT_AND_DATA_CONTRACT"}
  ],
  "data_classes": [
    {"class":"KNOWLEDGE_CONTENT_AND_ATTACHMENTS","observed_locations":["Electron userData/data/knowledge-base","knowledge-base KB_REPO_PATH or kb-data","legacy user-selected vault paths"],"sensitivity":"HUMAN_OWNED_PRIVATE_BY_DEFAULT","migration":"BACKUP_INVENTORY_HASH_AND_REVERSIBLE_REHEARSAL_REQUIRED"},
    {"class":"GIT_HISTORY_REMOTES_CHANNEL_STATE_AND_RECEIPTS","observed_locations":["knowledge repository .git","knowledge repository .hololake/channel-state.json","knowledge repository .hololake/receipts"],"sensitivity":"PROVENANCE_AUTHORITY_AND_NETWORK_SENSITIVE","migration":"SEPARATE_CONTENT_HISTORY_REMOTE_AUTHORITY_AND_RECEIPT_DECISIONS"},
    {"class":"AGE_CONVERSATIONS_AND_PENDING_ACTIONS","observed_locations":["Electron userData/agent-conversations.json","knowledge-base HOLOLAKE_AGENT_STATE_PATH"],"sensitivity":"RELATIONSHIP_AND_ACTION_AUTHORITY_SENSITIVE","migration":"NO_BLIND_IMPORT_PENDING_ACTIONS_REQUIRE_EXPIRY_OWNERSHIP_AND_RECONFIRMATION"},
    {"class":"MODEL_AND_SERVER_CREDENTIALS","observed_locations":["Electron userData/model-config.json","Electron userData/server-auth.json","Electron userData/node-keystore.json","Electron userData/hololake-git-askpass.sh"],"sensitivity":"SECRET_CRITICAL","migration":"NEVER_COPY_AS_PLAIN_DATA_REAUTHORIZE_PER_DESTINATION_AND_STORE_IN_OS_CREDENTIAL_VAULT"},
    {"class":"SERVER_PROFILES_AND_UI_PREFERENCES","observed_locations":["Electron userData/server-profiles.json","browser localStorage hololake.layout.* and hololake.human-preferences.v1"],"sensitivity":"PERSONAL_CONFIGURATION","migration":"SCHEMA_VALIDATE_AND_ALLOW_HUMAN_RESET"},
    {"class":"LEGACY_VAULT_TOOL_CONFIGURATION","observed_locations":["user-selected vaults","vault .agents/mcp_config.json","external MCP client configuration files"],"sensitivity":"EXECUTION_BOUNDARY_SENSITIVE","migration":"DO_NOT_MUTATE_OR_IMPORT_UNTIL_TOOL_AUTHORITY_AUDIT_COMPLETES"}
  ],
  "prohibited_transplants": [
    "ELECTRON_PRIVILEGED_PRELOAD_WITHOUT_NAVIGATION_AND_SENDER_ORIGIN_LOCK",
    "UNAUTHENTICATED_LOOPBACK_CONTROL_API_OR_NULL_ORIGIN_CORS",
    "STORED_MODEL_KEY_REBOUND_TO_RENDERER_SELECTED_BASE_URL",
    "FIXED_PORT_TUNNEL_READINESS_INFERENCE",
    "PERSISTENT_ALL_SCOPE_TOKEN_WITHOUT_REVOCATION",
    "LEXICAL_ONLY_PATH_CONTAINMENT_OR_UNVALIDATED_GIT_REVISION_REMOTE",
    "UPSTREAM_OR_DONOR_UPDATE_ENDPOINTS",
    "DONOR_SOURCE_WITHOUT_FILE_PROVENANCE_AND_LICENSE_AUTHORIZATION"
    ,"MODEL_OUTPUT_DIRECT_WRITE_DELETE_WITHOUT_EXACT_EXPIRING_HUMAN_CONFIRMATION"
    ,"RENDERER_WRITABLE_FILESYSTEM_AUTHORIZATION_REGISTRY"
    ,"GIT_OR_RECURSIVE_FOLDER_OPERATIONS_WITHOUT_CANONICAL_REGISTERED_ROOT_BINDING"
    ,"VAULT_SCANNERS_THAT_FOLLOW_SYMLINKS_OUTSIDE_THE_CANONICAL_ROOT"
    ,"WORKSPACE_SELECTED_HOST_ENVIRONMENT_SECRET_INJECTION"
    ,"PROMPT_ONLY_SAFE_MODE_OR_ADAPTERS_THAT_IGNORE_PERMISSION_MODE"
    ,"RUNTIME_PACKAGE_ACQUISITION_OR_PATH_FIRST_EXECUTABLE_DISCOVERY"
  ],
  "open_gates": [
    "DIRECT_AND_TRANSITIVE_DEPENDENCY_LICENSE_SBOM",
    "FILE_LEVEL_PROVENANCE",
    "PHYSICAL_USER_DATA_INVENTORY_AND_BACKUP",
    "REVERSIBLE_DATA_MIGRATION_REHEARSAL",
    "VISUAL_DIRECTION_SELECTION"
  ],
  "complete": false
}