feat(tcs): ignite generic host and signing trust

2026-08-24 11:05:46 +08:00 · 2026-08-24 11:05:46 +08:00 · 3c4abb314d
commit 3c4abb314d
parent 3049cbb458
26 changed files with 2655 additions and 0 deletions
--- a/build/TCS-EVENT-TRUSTED-SIGNER-PROVISIONING-AUTHORIZATION-20260824.human.en-US.md
+++ b/build/TCS-EVENT-TRUSTED-SIGNER-PROVISIONING-AUTHORIZATION-20260824.human.en-US.md
@ -0,0 +1,134 @@
+# BingShuo Authorization Event for Generic Machine Host and Development-Line Trusted Signer Provisioning · Human Engineering Language (English)
+
+> This is an English reading projection of validated native TCS/HLDP source. It is not a new canonical source and grants no execution authority.
+
+## What this is
+
+This is a **event** declaration with identifier `TCS-EVENT-TRUSTED-SIGNER-PROVISIONING-AUTHORIZATION-20260824` and version `0.1.0`. The projector validates it with the Stage-1 compiler before changing its reading order.
+
+## Who is here
+
+The native source does not provide this field; the projector does not guess.
+
+## Why this started
+
+- **trigger**  `trigger`
+  - **value**：冰朔确认第四代编程语言不再作为主要开发语言而只作为机器运行方式，并明确允许继续，同时指出Xcode内已有签名证书  `trigger.value`
+- **source**  `source`
+  - **channel**：ICE-CH-ZC001  `source.channel`
+  - **exact_text_sha256**：e9feb935f8299fc5935af70fc73bb960fd16e30a5438ff18b92e88b1c0d9b463  `source.exact_text_sha256`
+  - **occurred_at**：2026-08-24  `source.occurred_at`
+  - **source_class**：S01_DIRECT_HUMAN_CURRENT_MESSAGE  `source.source_class`
+  - **speaker**：ICE-GL∞  `source.speaker`
+
+## What changed
+
+The native source does not provide this field; the projector does not guess.
+
+## How it will execute
+
+This is a non-executable declaration and has no action graph.
+
+## Boundaries and exception handling
+
+The native source does not provide this field; the projector does not guess.
+
+## How completion is proven
+
+- **acceptance**  `acceptance`
+  - **apple_binary_signature**：PASS  `acceptance.apple_binary_signature`
+  - **authorization_source_hash**：PASS  `acceptance.authorization_source_hash`
+  - **completion_claim**：no  `acceptance.completion_claim`
+  - **ed25519_signer**：PENDING_PROVISIONING  `acceptance.ed25519_signer`
+  - **generic_host**：EXECUTED_TARGET_READBACK_VERIFIED  `acceptance.generic_host`
+  - **module_installation**：no  `acceptance.module_installation`
+
+## Where to continue next time
+
+The native source does not provide this field; the projector does not guess.
+
+## Source and verification
+
+- **Native declaration identifier**: `TCS-EVENT-TRUSTED-SIGNER-PROVISIONING-AUTHORIZATION-20260824`
+- **Native declaration kind**: `EVENT`
+- **TCS source SHA-256**: `5acdd66c1bfc2d7d72aae288a1ac2daa0062de89aabf45d195b8aff851beae17`
+- **Validation compiler**: `TCS-COMPILER-STAGE3-GENERIC-ACTION-LOADER-0001`
+- **Projection protocol**: `GLS-HLDP-HUMAN-ENGINEERING-PROJECTION-0001`
+
+## Complete native structure cross-reference
+
+All top-level structures and field paths are retained below so a reader can audit whether the projection omitted information.
+
+- **acceptance**  `acceptance`
+  - **apple_binary_signature**：PASS  `acceptance.apple_binary_signature`
+  - **authorization_source_hash**：PASS  `acceptance.authorization_source_hash`
+  - **completion_claim**：no  `acceptance.completion_claim`
+  - **ed25519_signer**：PENDING_PROVISIONING  `acceptance.ed25519_signer`
+  - **generic_host**：EXECUTED_TARGET_READBACK_VERIFIED  `acceptance.generic_host`
+  - **module_installation**：no  `acceptance.module_installation`
+- **apple_certificate**  `apple_certificate`
+  - **certificate_sha1**：BB8630C144DB3CF6493BFAF9B0D08D7CAD127A8B  `apple_certificate.certificate_sha1`
+  - **identity**：DEVELOPER_ID_APPLICATION_TEAM_825A9L3G7Q  `apple_certificate.identity`
+  - **permitted_use**：MACOS_HOST_BINARY_CODE_SIGNATURE  `apple_certificate.permitted_use`
+  - **public_key_algorithm**：RSA  `apple_certificate.public_key_algorithm`
+  - **tcs_module_ed25519_equivalent**：no  `apple_certificate.tcs_module_ed25519_equivalent`
+- **authority_boundary**  `authority_boundary`
+  - **apple_binary_signature_is_module_signature**：no  `authority_boundary.apple_binary_signature_is_module_signature`
+  - **key_export_forbidden**：yes  `authority_boundary.key_export_forbidden`
+  - **key_generation_may_occur_now**：yes  `authority_boundary.key_generation_may_occur_now`
+  - **os_login_is_signature**：no  `authority_boundary.os_login_is_signature`
+  - **production_or_other_development_line_use**：no  `authority_boundary.production_or_other_development_line_use`
+  - **relationship_is_signature**：no  `authority_boundary.relationship_is_signature`
+  - **scope_expansion_forbidden**：yes  `authority_boundary.scope_expansion_forbidden`
+- **decision**  `decision`
+  - **fourth_generation_language_primary**：no  `decision.fourth_generation_language_primary`
+  - **fourth_generation_language_role**：MECHANICAL_MACHINE_RUNTIME_AND_HOST_ADAPTER_ONLY  `decision.fourth_generation_language_role`
+  - **generic_gir_host_authorized**：yes  `decision.generic_gir_host_authorized`
+  - **tcs_primary_development_language**：yes  `decision.tcs_primary_development_language`
+  - **trusted_signer_provisioning_authorized**：yes  `decision.trusted_signer_provisioning_authorized`
+- **expected_receipts**  `expected_receipts`
+  - **values**  `expected_receipts.values`
+    - APPLE_CODESIGN_VERIFY_READBACK
+    - ED25519_PUBLIC_KEY_FINGERPRINT
+    - KEYCHAIN_ITEM_READBACK_WITHOUT_SECRET
+    - SIGNED_CAPABILITY_REGISTRY_VERIFICATION
+    - MODULE_SIGNATURE_VERIFICATION
+    - INSTALL_AND_MOUNT_RECEIPTS
+- **header**  `header`
+  - **canonical source path**：language/events/TCS-EVENT-TRUSTED-SIGNER-PROVISIONING-AUTHORIZATION-20260824.tcs  `header.canonical_uri`
+  - **compatibility**  `header.compatibility`
+    - TCS-COMPILER-STAGE3-GENERIC-ACTION-LOADER-0001
+    - GIR/1
+  - **language**：TCS/0.1  `header.language`
+  - **lifecycle**：CANDIDATE  `header.lifecycle`
+  - **English name**：BingShuo Authorization Event for Generic Machine Host and Development-Line Trusted Signer Provisioning  `header.name_en`
+  - **Chinese name**：冰朔授权通用机器宿主与本开发线可信签名者供给事件  `header.name_zh`
+  - **profile**：HLDP/1  `header.profile`
+  - **protocols**  `header.protocols`
+    - TCS-TRUSTED-SIGNER-PROVISIONING-REQUEST-0001
+    - TCS-GENERIC-ACTION-GRAPH-LOADER-0001
+    - TCS-MODULE-ABI-0001
+  - **schema**：tcs.event/v1  `header.schema`
+  - **version**：0.1.0  `header.version`
+- **source**  `source`
+  - **channel**：ICE-CH-ZC001  `source.channel`
+  - **exact_text_sha256**：e9feb935f8299fc5935af70fc73bb960fd16e30a5438ff18b92e88b1c0d9b463  `source.exact_text_sha256`
+  - **occurred_at**：2026-08-24  `source.occurred_at`
+  - **source_class**：S01_DIRECT_HUMAN_CURRENT_MESSAGE  `source.source_class`
+  - **speaker**：ICE-GL∞  `source.speaker`
+- **tcs_signer**  `tcs_signer`
+  - **algorithm**：ED25519  `tcs_signer.algorithm`
+  - **expiry_policy**：NO_AUTOMATIC_EXPIRY_REVOKE_BY_NEW_DIRECT_BINGSHUO_LANGUAGE_OR_KEY_COMPROMISE  `tcs_signer.expiry_policy`
+  - **permitted_scope**：HOLOLAKE-LPM-TCS-NATIVE-20260823_CAPABILITY_REGISTRY_AND_THREE_VERIFIED_MODULE_PACKAGES  `tcs_signer.permitted_scope`
+  - **private_key_location**：LOCAL_MACOS_LOGIN_KEYCHAIN_GENERIC_PASSWORD_ITEM  `tcs_signer.private_key_location`
+  - **private_key_mobile_drive**：no  `tcs_signer.private_key_mobile_drive`
+  - **private_key_repository**：no  `tcs_signer.private_key_repository`
+  - **public_key_repository**：yes  `tcs_signer.public_key_repository`
+  - **revocation_epoch**：1  `tcs_signer.revocation_epoch`
+  - **signer_id**：TCS-SIGNER-BINGSHUO-ZC001-DEV-0001  `tcs_signer.signer_id`
+- **trigger**  `trigger`
+  - **value**：冰朔确认第四代编程语言不再作为主要开发语言而只作为机器运行方式，并明确允许继续，同时指出Xcode内已有签名证书  `trigger.value`
+
+---
+
+This page changes only the reading order; it does not change TCS/HLDP semantics.