Merge pull request 'docs(native): 京东原生导航网络预检失败回执' (#14) from codex/jd-native-anchor-network-preflight-20260807 into main

product-source/hololake-platform/docs/adr/0171-jd-native-service-equivalence-staging.md

@@ -51,6 +51,13 @@ JD-FD-PRIMARY 在原生光湖 OS 常驻时已经证明：
 当前正文包含稳定的唯一入口映射。它尚未在原生常驻期间自动拉取 REPO-012 的新版本，
 因此“公共导航自动更新”仍需后续的原生锚点快照同步或带认证的增量更新协议。
 
+2026-08-07 的重启前网络门禁证明：京东 Linux 临时在 `172.16.0.6:3922` 监听时，
+BS-SG-003 到 `111.228.0.139:3922` 连接超时；临时监听随后停止。因此当前云网络入口为
+`0`，没有执行一场已知无法形成外部回读的物理重启。下一步只能二选一：
+
+- 在京东云为 `3922/TCP` 建立来源受限的精确入站规则，再做一次性原生门禁；
+- 或让原生系统沿现有受保护出站通道投影锚点，避免开放新的入站端口。
+
 ## 安全决定
 
 - 京东的无人值守默认启动继续保持 Linux 维护位；

product-source/hololake-platform/guanghu-os/deployments/JD-FD-PRIMARY/NATIVE-ANCHOR-NETWORK-PREFLIGHT-RECEIPT-20260807.hdlp

@@ -0,0 +1,37 @@
+schema: guanghu.jd-native-anchor-network-preflight-receipt/v1
+receipt_id: GH-OS-JD-FD-PRIMARY-NATIVE-ANCHOR-NETWORK-PREFLIGHT-20260807-001
+status: FAIL_0_EXTERNAL_REACHABILITY
+observed_at: 2026-08-07T01:22:00+08:00
+node_id: JD-FD-PRIMARY
+accepted_repository_commit: ab6c0577a71b8713b64cf3bd1e02a7076dfd648c
+candidate:
+  lba_start: 105
+  sector_count: 29
+  previous_sha256: 3512a76923f992adb0b339858a2a7e44ee144fcecb50284df4b743a44040469d
+  staged_sha256: 2911b5f6a067efb7b5b7ec330833cb9f8a6b965b5a05802770dd27032678f32f
+  replacement_receipt: /guanghu/recovery/JD-FD-PRIMARY-anchor-ab6c0577a71b8713b64cf3bd1e02a7076dfd648c/REPLACE-RECEIPT.hldp
+boot_safety:
+  current_running_os: LINUX_HOSTED_MAINTENANCE
+  unattended_default: gnulinux-simple-9e4550a0-452b-4f28-b5a5-d5364aa450f6
+  native_candidate_armed: false
+  code_entry_http: 200
+  public_anchor_http: 200
+network_preflight:
+  listener_address: 172.16.0.6
+  listener_port: 3922
+  source_node: BS-SG-003
+  source_scope: CURRENT_PROTECTED_NATIVE_RELAY
+  result: CONNECT_TIMEOUT
+  temporary_listener_stopped: true
+gates:
+  native_anchor_http_qemu_capability: 100
+  native_anchor_candidate_staged: 100
+  native_anchor_external_network_reachability: 0
+  native_anchor_http_physical_capability: 0
+  public_front_door_native_anchor_equivalence: 0
+  code_channel_service_equivalence: 0
+  production_native_cutover: 0
+decision:
+  physical_reboot_executed: false
+  reason: EXTERNAL_PATH_KNOWN_TO_FAIL_BEFORE_REBOOT
+  next_action: AUTHORIZE_JD_CLOUD_SOURCE_RESTRICTED_3922_RULE_OR_BUILD_OUTBOUND_ANCHOR_PROJECTION