bingshuo/hololake-system-architecture
Watch
1
0
Fork
You've already forked hololake-system-architecture
 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity

feat: add Guanghu Linux subcontrol supervisor contract

Browse source
This commit is contained in:
冰朔 2026-08-15 16:21:37 +08:00
commit 36996be39a
10 changed files with 803 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

21
product-source/hololake-platform/guanghu-os/README.md
View file

@ -57,6 +57,27 @@ The registered translation chain is:
TCS -> HLDP -> GLC -> GIR -> BTCP -> GOSK -> GHAL -> hardware
```
## Guanghu supervisor and Linux subcontrol lifecycle
`crates/supervisor` implements the first fail-closed source contract for
ADR-0175. A typed, policy-bound capability request can advance only through:
```text
DORMANT -> STARTING -> READY -> EXECUTING -> VERIFYING -> RECLAIMING -> DORMANT
```
The request must bind the exact node, subject, capability, authorization,
rollback checkpoint, backend, required protocol chain, and preserved rescue
slot. Every failure after a wake attempt enters reclaim. A receipt can report
`PASS_100` only after target-side readback and a second observation proving the
Linux subcontrol returned to `DORMANT`; a failed reclaim is
`FAIL_0_LOCKED`.
The deterministic contract and isolation harness are implemented and covered
at 100% of declared source lines and functions. No production Linux
subcontrol backend, independent Guanghu boot supervisor, JD boot change, or
physical cutover is implied by that source result.
## Language-primary boot target
`guanghu-language-primary.target` makes the accepted cognitive-control model