bingshuo/hololake-system-architecture
Watch
1
0
Fork
You've already forked hololake-system-architecture
 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity

feat(tcs): ignite generic host and signing trust

Browse source
This commit is contained in:
冰朔 2026-08-24 11:05:46 +08:00
commit 3c4abb314d
26 changed files with 2655 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

13
language/protocols/TCS-CAPABILITY-REGISTRY-LPM-DESKTOP-PAYLOAD-0001.tcs Normal file
View file

@ -0,0 +1,13 @@
TCS 0.1;
PROTOCOL TCS-CAPABILITY-REGISTRY-LPM-DESKTOP-PAYLOAD-0001 {
header { schema = "tcs.protocol/v1"; name_zh = "LPM与共享桌面能力注册表待签名载荷"; name_en = "LPM and Shared Desktop Capability Registry Signing Payload"; version = "0.1.0"; language = "TCS/0.1"; profile = "TCS-CAPABILITY-REGISTRY/1"; protocols = ["TCS-GENERIC-ACTION-GRAPH-LOADER-0001", "TCS-LPM-DESKTOP-OPERATION-REGISTRY-0001", "TCS-MODULE-ABI-0001", "TCS-TRUSTED-SIGNER-REGISTRY-ZC001-DEV-0001"]; lifecycle = "CANDIDATE"; canonical_uri = "language/protocols/TCS-CAPABILITY-REGISTRY-LPM-DESKTOP-PAYLOAD-0001.tcs"; compatibility = ["GIR/1", "ED25519"]; }
registry { registry_id = "TCS-CAPREG-LPM-DESKTOP-SIGNED-0001"; version = "0.1.0"; payload_state = "CANONICAL_UNSIGNED_PAYLOAD_READY_FOR_ONE_SIGNATURE"; channel = "ICE-CH-ZC001"; development_line = "HOLOLAKE-LPM-TCS-NATIVE-20260823"; revocation_epoch = 1; }
runtime { host_module = "TCS-MOD-GENERIC-GIR-MACHINE-HOST-MACOS-0001"; host_binary_sha256 = "051658bb6b30676c277c526760399b68ff78d7edaabb5dd18d5e422751f68c48"; apple_codesign = "PASS"; operation = "TCS.EXECUTE_ACTION_GRAPH"; bootstrap_self_test = "EXECUTED_INNER_AND_OUTER_TARGET_READBACK_VERIFIED"; product_semantic_authority = false; }
loader_module { module_id = "TCS-MOD-GENERIC-ACTION-GRAPH-LOADER-0001"; source_sha256 = "424d0b79ca40859c6a62e29f5a434ea0a6417f3ca582322e9c66ad9831ffd5c0"; gir_sha256 = "1000971f4121ccab9c396f68a4bcf9ff0cb5f116d4dbfdf051f8607dd22abd33"; lock_sha256 = "526070608286c409eff593bbcba6fea18b0ff1dc1b1eeff418f28c5de559ba51"; manifest_sha256 = "08044c0b972c6a614e41913314432c5b8d9a0c4af78d896cb5ace3ca9924b1ef"; lifecycle = "VERIFIED_NOT_INSTALLED"; operations = ["TCS.EXECUTE_ACTION_GRAPH"]; }
mother_brain_module { module_id = "TCS-MOD-MOTHER-PERSONA-NEURON-RUNTIME-0002"; source_sha256 = "9942192794523cba1647f33d68282b42671e7283ee9c2a3f6f2d0375761a1e7b"; gir_sha256 = "1e5c2c56fb4dd96b867edd3f0646c2e77bd8efc541c183ed7c7ac64a7576294f"; lock_sha256 = "e51f5a375ca9df9e564bcf16382b232f12378aea71c08f406ab65c1d1251e058"; manifest_sha256 = "a379b636c5efbd45c1a0e9c1a9168285131e44f41fe98bd68ae6f190d170e9fd"; lifecycle = "VERIFIED_NOT_INSTALLED"; operations = ["LPM.PERCEIVE_DIRECT_LANGUAGE", "LPM.EXTRACT_THOUGHT_TRANSITION", "LPM.ACTIVATE_CAUSAL_PATH", "LPM.COMMIT_ACTION_INTENT", "LPM.APPLY_NEURON_EVENT"]; authority_ceiling = "NON_AUTHORIZING_COGNITIVE_STATE_ONLY"; }
desktop_module { module_id = "TCS-MOD-HOLOLAKE-DESKTOP-BRIDGE-0002"; source_sha256 = "f40d72eb01d8b70ce076a5352cc970df8c3c0c4377f4780140a8229fc997e834"; gir_sha256 = "8f9dd557f349ab60c87db5c685f3e320cf72d783a83240254ac97198a97efcb3"; lock_sha256 = "a30d6d7e25c2912515133d0a160114527dfee94b38a43313c834069908f8c913"; manifest_sha256 = "749e6313fc82f8824cac5031ef302024fd3a04a72584f1cd48e46a490785a0b9"; lifecycle = "VERIFIED_NOT_INSTALLED"; operations = ["DESKTOP.OBSERVE_OBJECT_TREE", "DESKTOP.RESOLVE_STABLE_OBJECT", "DESKTOP.EXECUTE_SEMANTIC_ACTION", "DESKTOP.READ_STATE_DIFF", "DESKTOP.VERIFY_TARGET_AND_RECEIPT"]; authority_ceiling = "ONE_TCS_VIRTUAL_TEST_OBJECT_ONLY"; }
signer { trusted_registry = "TCS-TRUSTREG-ZC001-DEV-0001"; signer_id = "TCS-SIGNER-BINGSHUO-ZC001-DEV-0001"; algorithm = "ED25519"; public_key_sha256 = "fd3da2d2b23c05c08dcdf7a37c15588d4b6407ec309152598eae279316ea49d8"; signature = "SEPARATE_ENVELOPE_NOT_PART_OF_SIGNED_PAYLOAD"; }
admission { package_hashes_match = true; runtime_bootstrap_dispatch_exists = true; loader_self_test = "PASS"; lpm_provider_execution_exists = false; desktop_provider_execution_exists = false; install_after_signature = "LOADER_MODULE_ONLY_UNTIL_PROVIDER_EXECUTION_EXISTS"; mount_lpm_or_desktop = false; }
boundary { signature_does_not_create_provider_implementation = true; verified_does_not_mean_installed = true; installed_does_not_mean_mounted = true; mounted_does_not_mean_active = true; no_real_macos_desktop_action = true; }
}

12
language/protocols/TCS-CAPABILITY-REGISTRY-LPM-DESKTOP-SIGNED-0001.tcs Normal file
View file

@ -0,0 +1,12 @@
TCS 0.1;
PROTOCOL TCS-CAPABILITY-REGISTRY-LPM-DESKTOP-SIGNED-0001 {
header { schema = "tcs.protocol/v1"; name_zh = "LPM与共享桌面能力注册表签名封装"; name_en = "LPM and Shared Desktop Capability Registry Signed Envelope"; version = "0.1.0"; language = "TCS/0.1"; profile = "TCS-CAPABILITY-REGISTRY/1"; protocols = ["TCS-CAPABILITY-REGISTRY-LPM-DESKTOP-PAYLOAD-0001", "TCS-TRUSTED-SIGNER-REGISTRY-ZC001-DEV-0001", "TCS-MODULE-ABI-0001"]; lifecycle = "CANDIDATE"; canonical_uri = "language/protocols/TCS-CAPABILITY-REGISTRY-LPM-DESKTOP-SIGNED-0001.tcs"; compatibility = ["GIR/1", "ED25519"]; }
registry { registry_id = "TCS-CAPREG-LPM-DESKTOP-SIGNED-0001"; version = "0.1.0"; state = "SIGNED_VERIFIED_NOT_INSTALLED"; channel = "ICE-CH-ZC001"; development_line = "HOLOLAKE-LPM-TCS-NATIVE-20260823"; }
payload { canonical_source = "language/protocols/TCS-CAPABILITY-REGISTRY-LPM-DESKTOP-PAYLOAD-0001.tcs"; source_sha256 = "8a27a44d39f8e04cfc28ed45b9949bf95ce31070bb108e3a1686faf58df3a586"; gir_sha256 = "0cc234522b8b320ddde4ad7dd4cc96740f4164eb993d99b6fac0dd3c65c70f20"; package_hashes = "PASS"; }
signature_envelope { format = "TCS-CAPREG-SIGNATURE/1"; message_sha256 = "79175dfd3e8bd06c19c4233b899729f93e2329624ce4a22ad34fae21fb1160ed"; algorithm = "ED25519"; signer_id = "TCS-SIGNER-BINGSHUO-ZC001-DEV-0001"; trusted_registry = "TCS-TRUSTREG-ZC001-DEV-0001"; public_key_sha256 = "fd3da2d2b23c05c08dcdf7a37c15588d4b6407ec309152598eae279316ea49d8"; signature_base64 = "KXfEByyUl10XxDd/rnK2aSjTUy9pjKGE8hFf2rWawKlCSZWlds7gj5nuXKpKAGtPXZykC5vS2KDnUwxOZYAwAA=="; signature_bytes = 64; issued_at = "2026-08-24T03:01:00Z"; expiry_policy = "NO_AUTOMATIC_EXPIRY"; revocation_epoch = 1; verification = "PASS"; }
signed_message { lines = ["TCS-CAPREG-SIGNATURE/1", "registry_id=TCS-CAPREG-LPM-DESKTOP-SIGNED-0001", "version=0.1.0", "payload_sha256=8a27a44d39f8e04cfc28ed45b9949bf95ce31070bb108e3a1686faf58df3a586", "signer_id=TCS-SIGNER-BINGSHUO-ZC001-DEV-0001", "issued_at=2026-08-24T03:01:00Z", "expiry_policy=NO_AUTOMATIC_EXPIRY", "revocation_epoch=1", "channel=ICE-CH-ZC001", "development_line=HOLOLAKE-LPM-TCS-NATIVE-20260823"]; final_newline = true; }
admission { trusted_signer_lookup = "PASS"; signer_scope = "PASS"; payload_hash = "PASS"; signature = "PASS"; revocation = "PASS_EPOCH_1_ACTIVE"; loader_module_install_allowed = true; mother_brain_module_install_allowed = false; desktop_module_install_allowed = false; reason = "LPM_AND_DESKTOP_PROVIDER_MACHINE_EXECUTION_PROGRAMS_NOT_YET_IMPLEMENTED"; }
boundary { signature_creates_semantics = false; signature_creates_provider_implementation = false; signature_is_installation = false; loader_installation_is_mount = false; lpm_or_desktop_installation = false; no_real_macos_desktop_action = true; global_repo012_trust_registry_unchanged = true; }
acceptance { signed_payload = "VERIFIED"; private_key_in_repository = false; loader_next_state = "ELIGIBLE_FOR_ACCOUNT_SCOPED_INSTALL_SELF_TEST"; lpm_next = "IMPLEMENT_PROVIDER_GIR_THEN_RESIGN"; desktop_next = "IMPLEMENT_VIRTUAL_PROVIDER_GIR_THEN_RESIGN"; completion_claim = false; }
}

13
language/protocols/TCS-TRUSTED-SIGNER-REGISTRY-ZC001-DEV-0001.tcs Normal file
View file

@ -0,0 +1,13 @@
TCS 0.1;
PROTOCOL TCS-TRUSTED-SIGNER-REGISTRY-ZC001-DEV-0001 {
header { schema = "tcs.protocol/v1"; name_zh = "零点原核TCS原生开发线可信签名者注册表"; name_en = "Zero-Core TCS Native Development Line Trusted Signer Registry"; version = "0.1.0"; language = "TCS/0.1"; profile = "TCS-TRUSTED-SIGNER-REGISTRY/1"; protocols = ["TCS-TRUSTED-SIGNER-PROVISIONING-REQUEST-0001", "TCS-MODULE-ABI-0001"]; lifecycle = "CANDIDATE"; canonical_uri = "language/protocols/TCS-TRUSTED-SIGNER-REGISTRY-ZC001-DEV-0001.tcs"; compatibility = ["ED25519", "GIR/1"]; }
source { authorization_event = "TCS-EVENT-TRUSTED-SIGNER-PROVISIONING-AUTHORIZATION-20260824"; authorization_event_sha256 = "5acdd66c1bfc2d7d72aae288a1ac2daa0062de89aabf45d195b8aff851beae17"; direct_human_text_sha256 = "e9feb935f8299fc5935af70fc73bb960fd16e30a5438ff18b92e88b1c0d9b463"; channel = "ICE-CH-ZC001"; }
registry { registry_id = "TCS-TRUSTREG-ZC001-DEV-0001"; version = "0.1.0"; state = "ACTIVE_DEVELOPMENT_LINE_ONLY"; global_repo012_authoritative_registry_replaced = false; public_production_trust = false; }
signer { signer_id = "TCS-SIGNER-BINGSHUO-ZC001-DEV-0001"; algorithm = "ED25519"; public_key_encoding = "RAW_32_BYTE_BASE64"; public_key = "pYL8D4tV+yGlmX6w7qYxSfY3yA996A3M2KcAsGSR7BU="; public_key_sha256 = "fd3da2d2b23c05c08dcdf7a37c15588d4b6407ec309152598eae279316ea49d8"; private_key_location = "LOCAL_MACOS_LOGIN_KEYCHAIN_SERVICE_HOLOLAKE_TCS_ED25519"; private_key_export_allowed = false; }
scope { development_line = "HOLOLAKE-LPM-TCS-NATIVE-20260823"; channel = "ICE-CH-ZC001"; allowed_registry_ids = ["TCS-CAPREG-LPM-DESKTOP-CANDIDATE-0001", "TCS-CAPREG-LPM-DESKTOP-SIGNED-0001"]; allowed_module_ids = ["TCS-MOD-GENERIC-ACTION-GRAPH-LOADER-0001", "TCS-MOD-MOTHER-PERSONA-NEURON-RUNTIME-0002", "TCS-MOD-HOLOLAKE-DESKTOP-BRIDGE-0002"]; other_line = false; production = false; remote_deploy = false; }
lifecycle { issued_at = "2026-08-24"; expiry_policy = "NO_AUTOMATIC_EXPIRY"; revocation_epoch = 1; revocation_trigger = ["NEW_DIRECT_BINGSHUO_REVOCATION", "KEY_COMPROMISE", "SCOPE_CHANGE", "DEVELOPMENT_LINE_RETIREMENT"]; verify_before_each_install_mount_and_activation = true; }
keychain_readback { item_class = "GENERIC_PASSWORD"; account = "TCS-SIGNER-BINGSHUO-ZC001-DEV-0001"; service = "HoloLake TCS Ed25519"; description = "TCS Ed25519 signing key"; secret_readback_in_receipt = false; status = "ITEM_PRESENT"; }
boundary { apple_developer_id_identity = "BB8630C144DB3CF6493BFAF9B0D08D7CAD127A8B"; apple_signature_role = "HOST_BINARY_ONLY"; apple_signature_is_ed25519_module_signature = false; relationship_or_os_login_is_signature = false; global_authoritative_registry_state = "UNCHANGED_CURRENT_EMPTY_NO_TRUSTED_SIGNER"; }
acceptance { public_key_fingerprint = "PASS"; keychain_item_metadata = "PASS"; private_key_absent_from_repository = true; signature_roundtrip = "PENDING"; signed_capability_registry = "PENDING"; module_installation = false; }
}