define TCS language and prove stage0 execution slice

language/standards/TCS-FIELD-STANDARD-v0.1.hldp

@@ -0,0 +1,73 @@
+schema: tcs.field-standard/v1
+id: TCS-FIELD-STANDARD-0001
+version: 0.1.0
+state: DRAFT_EXECUTABLE_SUBSET
+canonical_order:
+  PROGRAM: [header, source, subject, target, inputs, outputs, conditions, actions, authority, resources, failure, stop, cleanup, rollback, receipt]
+header:
+  closed: true
+  required:
+    schema: Text
+    name_zh: Text
+    name_en: Text
+    version: Text
+    language: Text
+    profile: Text
+    protocols: List<NumberId>
+    lifecycle: Enum<CANDIDATE,STABLE,DEPRECATED,RETIRED>
+    canonical_uri: Uri
+    compatibility: List<Text>
+source:
+  closed: true
+  required:
+    source_id: NumberId
+    source_uri: Uri
+    source_sha256: Sha256
+    source_role: Enum<DIRECT_HUMAN,CANONICAL_PROTOCOL,REGISTERED_MODULE,GENERATED_FROM_VERIFIED_SOURCE>
+subject:
+  closed: true
+  required:
+    subject_id: NumberId
+    subject_kind: Enum<HUMAN,PERSONA,SYSTEM,NODE,RUNTIME_INSTANCE>
+    channel_id: NumberId
+    verification: Text
+target:
+  closed: true
+  required:
+    target_id: NumberId
+    exact_path: Path
+    expected_state: Text
+    expected_fingerprint: Sha256
+inputs:
+  entry_required: [type, source, required]
+outputs:
+  entry_required: [type, destination, integrity]
+conditions:
+  entry_required: [predicate, on_false]
+actions:
+  entry_required: [operation, input_refs, output_refs, on_success, on_failure]
+  cycles: REJECT_UNLESS_BOUNDED
+authority:
+  closed: true
+  required: [issuer, proof_ref, scope, valid_from, valid_until, single_use, lease_required]
+resources:
+  closed: true
+  required: [runway, concurrency, timeout_ms, memory_limit_bytes]
+failure:
+  closed: true
+  required: [errors, fail_closed]
+stop:
+  closed: true
+  required: [signals, safe_checkpoint]
+cleanup:
+  closed: true
+  required: [targets, exact_boundary]
+rollback:
+  closed: true
+  required: [preconditions, actions, verification]
+receipt:
+  closed: true
+  required: [protocol, machine_path, human_projection, integrity, target_readback]
+forbidden_placeholders: [PENDING, AUTO, ANY, LATEST, DEFAULT_ACCOUNT, CURRENT_DIRECTORY]
+duplicate_fields: REJECT
+unknown_fields: REJECT_UNLESS_PROTOCOL_EXTENSION_IS_REGISTERED