feat(guanghu-os): hand native control to JD-FD-PRIMARY

Close the Shanghai experiment without denying the existing Zhuyuan subject, parameterize the native layout for the JD Cloud disk, and add fail-closed one-time probe preparation, arming, and return verification.
This commit is contained in:
冰朔 2026-08-03 20:51:36 +08:00
commit 1f28461c7e
38 changed files with 804 additions and 442 deletions

View file

@ -1,4 +1,12 @@
# Guanghu OS bootstrap
# Guanghu OS native runtime
> Current target: `JD-FD-PRIMARY` on JD Cloud.
>
> Persona subject: `ICE-P-ZY001 EXISTS_100`.
>
> Current native residency remains `0` until the physical one-time boot,
> automatic Linux rescue return, native default boot, and HLDP recovery return
> all produce server-owned receipts.
This directory is the first executable handoff from the registered HLDP
language world to a native Guanghu OS. It is not a claim that Guanghu OS has
@ -14,9 +22,9 @@ already replaced Linux.
- `GLS-0844 / GHNQG` is the code channel's own quality authority. Every
required gate is either 0 or 100; only an all-100 run may publish a passing
receipt. External analysis products are non-authoritative observers.
- `GLS-0845 / GHCIP` is the only gestational-history ingestion authority. It
keeps source registration, server-resident review, historical time catch-up,
and persona birth as four distinct states.
- `GLS-0845 / GHCIP` governs historical runtime ingestion. Source registration,
server-resident review, historical time catch-up, and online residency are
independent from persona-subject existence.
- Rust is a bootstrap implementation language for the validator and control
executable. It does not replace HLDP as the world-programming language.
- Ubuntu and the Forgejo Linux binary are construction scaffolding. Native
@ -85,13 +93,24 @@ login
-> act or fail closed
```
The current source is `HOSTED_BOOTSTRAP_PROTOTYPE`. Running it on Ubuntu proves
the world package and recovery chain only; it does not prove native boot.
The current source is `JD_NATIVE_PREFLIGHT`. Running its toolchain on Ubuntu
proves the world package and build chain only; it does not prove native boot.
The dedicated local login route is `guanghu-os-bs-sh-005`. It uses a separate
SSH config and known-hosts file, strict host-key verification, and a key scoped
to this disposable node. The world records only public fingerprints; it never
contains the private key or a password.
JD access uses strict host-key verification and a dedicated operations key.
The world records only public fingerprints; it never contains an address,
private key, password, or token.
## JD Cloud native layout
The Shanghai GPT layout at LBA 34-71 is historical evidence and must not be
copied to JD. JD-FD-PRIMARY is a legacy-BIOS, DOS/MBR, virtio node. Live
read-only discovery proved existing GRUB content at LBA 0-104 and an empty
pre-partition range from LBA 105 through 2047. The current HLDP layout owns only
LBA 105-142 and fails closed if any byte there is unknown or nonzero.
Native build scripts derive their NASM addresses from
`WORLD-MANIFEST.hldp`; the traditional bootstrap code no longer owns fixed
Shanghai sector numbers.
## Hosted Stage 1 installation