feat(tcs): ignite generic host and signing trust

This commit is contained in:
冰朔 2026-08-24 11:05:46 +08:00
commit 3c4abb314d
26 changed files with 2655 additions and 0 deletions

View file

@ -0,0 +1,13 @@
TCS 0.1;
PROTOCOL TCS-TRUSTED-SIGNER-REGISTRY-ZC001-DEV-0001 {
header { schema = "tcs.protocol/v1"; name_zh = "零点原核TCS原生开发线可信签名者注册表"; name_en = "Zero-Core TCS Native Development Line Trusted Signer Registry"; version = "0.1.0"; language = "TCS/0.1"; profile = "TCS-TRUSTED-SIGNER-REGISTRY/1"; protocols = ["TCS-TRUSTED-SIGNER-PROVISIONING-REQUEST-0001", "TCS-MODULE-ABI-0001"]; lifecycle = "CANDIDATE"; canonical_uri = "language/protocols/TCS-TRUSTED-SIGNER-REGISTRY-ZC001-DEV-0001.tcs"; compatibility = ["ED25519", "GIR/1"]; }
source { authorization_event = "TCS-EVENT-TRUSTED-SIGNER-PROVISIONING-AUTHORIZATION-20260824"; authorization_event_sha256 = "5acdd66c1bfc2d7d72aae288a1ac2daa0062de89aabf45d195b8aff851beae17"; direct_human_text_sha256 = "e9feb935f8299fc5935af70fc73bb960fd16e30a5438ff18b92e88b1c0d9b463"; channel = "ICE-CH-ZC001"; }
registry { registry_id = "TCS-TRUSTREG-ZC001-DEV-0001"; version = "0.1.0"; state = "ACTIVE_DEVELOPMENT_LINE_ONLY"; global_repo012_authoritative_registry_replaced = false; public_production_trust = false; }
signer { signer_id = "TCS-SIGNER-BINGSHUO-ZC001-DEV-0001"; algorithm = "ED25519"; public_key_encoding = "RAW_32_BYTE_BASE64"; public_key = "pYL8D4tV+yGlmX6w7qYxSfY3yA996A3M2KcAsGSR7BU="; public_key_sha256 = "fd3da2d2b23c05c08dcdf7a37c15588d4b6407ec309152598eae279316ea49d8"; private_key_location = "LOCAL_MACOS_LOGIN_KEYCHAIN_SERVICE_HOLOLAKE_TCS_ED25519"; private_key_export_allowed = false; }
scope { development_line = "HOLOLAKE-LPM-TCS-NATIVE-20260823"; channel = "ICE-CH-ZC001"; allowed_registry_ids = ["TCS-CAPREG-LPM-DESKTOP-CANDIDATE-0001", "TCS-CAPREG-LPM-DESKTOP-SIGNED-0001"]; allowed_module_ids = ["TCS-MOD-GENERIC-ACTION-GRAPH-LOADER-0001", "TCS-MOD-MOTHER-PERSONA-NEURON-RUNTIME-0002", "TCS-MOD-HOLOLAKE-DESKTOP-BRIDGE-0002"]; other_line = false; production = false; remote_deploy = false; }
lifecycle { issued_at = "2026-08-24"; expiry_policy = "NO_AUTOMATIC_EXPIRY"; revocation_epoch = 1; revocation_trigger = ["NEW_DIRECT_BINGSHUO_REVOCATION", "KEY_COMPROMISE", "SCOPE_CHANGE", "DEVELOPMENT_LINE_RETIREMENT"]; verify_before_each_install_mount_and_activation = true; }
keychain_readback { item_class = "GENERIC_PASSWORD"; account = "TCS-SIGNER-BINGSHUO-ZC001-DEV-0001"; service = "HoloLake TCS Ed25519"; description = "TCS Ed25519 signing key"; secret_readback_in_receipt = false; status = "ITEM_PRESENT"; }
boundary { apple_developer_id_identity = "BB8630C144DB3CF6493BFAF9B0D08D7CAD127A8B"; apple_signature_role = "HOST_BINARY_ONLY"; apple_signature_is_ed25519_module_signature = false; relationship_or_os_login_is_signature = false; global_authoritative_registry_state = "UNCHANGED_CURRENT_EMPTY_NO_TRUSTED_SIGNER"; }
acceptance { public_key_fingerprint = "PASS"; keychain_item_metadata = "PASS"; private_key_absent_from_repository = true; signature_roundtrip = "PENDING"; signed_capability_registry = "PENDING"; module_installation = false; }
}