feat(hololake): bind direct-language V1 baseline

This commit is contained in:
冰朔 2026-09-03 21:14:45 +08:00
commit 3df6b1d3ca
14 changed files with 809 additions and 23 deletions

View file

@ -0,0 +1,23 @@
{
"schema": "hololake.clean-v1-execution-baseline/v1",
"contract_id": "HLP-CLEAN-V1-EXECUTION-BASELINE-0001",
"canonical_tcs": "language/HOLOLAKE-CLEAN-V1-DIRECT-LANGUAGE-EXECUTION-BASELINE.tcs",
"anchor_manifest_sha256": "7e130de78f91a32726e22e4be7d92acf4da966c8968ec359062aa8186c4243c2",
"public_raw_language_embedded": false,
"layers": {
"bottom": ["SIGNED_PUBLIC_DISTRIBUTION_GIT", "USER_PRIVATE_GIT", "TCS_GIR_RUNTIME", "SIGNED_APP_UPDATE"],
"middle": ["MODEL_INDEPENDENT_AGENT", "REGISTERED_CAPABILITIES", "APPROVAL_AND_RECEIPTS"],
"top": ["NAMED_NUMBERED_PERSONAL_CHANNEL", "PERSONA_CONVERSATION", "KNOWLEDGE_BASE", "MODULE_MARKET", "SYSTEM_HISTORY", "ENTERPRISE_PORTAL"]
},
"source_kinds": ["USER_MESSAGE", "PERSONA_RESPONSE", "SYSTEM_CONTEXT", "PROTOCOL_EVENT", "AGENT_ACTION", "TOOL_RESULT", "SYSTEM_RECEIPT", "EXTERNAL_AI_MESSAGE"],
"enterprise_entrance": {
"embedded_enterprise_server": false,
"required_proofs": ["DOMAIN_RESPONSIBLE_HUMAN_ID", "BOUND_PERSONA_ID", "LOCAL_DEVICE_PUBLIC_KEY", "AUXILIARY_MACHINE_FINGERPRINT", "SERVER_CHALLENGE_SIGNATURE"],
"future_optional_bridge": "RESPONSIBLE_HUMAN_PERSONAL_SERVER",
"session": "SHORT_LIVED_SINGLE_DOMAIN_SINGLE_REPOSITORY",
"server_is_authoritative": true
},
"current_status": "ARCHITECTURE_ALIGNED_LOCAL_RUNTIME_REVALIDATION_REQUIRED",
"completion": "INCOMPLETE"
}

View file

@ -0,0 +1,13 @@
{
"schema": "hololake.enterprise-responsibility-entrance/v1",
"contract_id": "HLP-ENTERPRISE-RESPONSIBILITY-ENTRANCE-0001",
"state": "ARCHITECTURE_REGISTERED_IMPLEMENTATION_PENDING",
"surface": "HOLOLAKE_GATED_ENTERPRISE_PORTAL",
"enterprise_server_embedded": false,
"identities": ["DOMAIN_ID", "RESPONSIBLE_HUMAN_ID", "BOUND_PERSONA_ID", "LOCAL_NODE_ID", "DEVICE_KEY_ID"],
"device_proof": {"primary": "DEVICE_PRIVATE_KEY_CHALLENGE_SIGNATURE", "private_key_storage": "OS_KEYCHAIN_OR_SECURE_HARDWARE", "auxiliary": "HASHED_MACHINE_FINGERPRINT", "fingerprint_is_sole_credential": false},
"personal_server_bridge": {"required_in_v1": false, "future_role": "RESPONSIBLE_HUMAN_OWNED_SECOND_PROOF_AND_BRIDGE", "may_expand_scope": false},
"session": {"lifetime": "SHORT_LIVED", "scope": "ONE_DOMAIN_ONE_REPOSITORY", "replay_protection": true, "revocation_required": true},
"negative_cases": ["UNKNOWN_MEMBER", "WRONG_DOMAIN", "WRONG_PERSONA", "UNREGISTERED_DEVICE", "BAD_SIGNATURE", "REPLAY", "EXPIRED_SESSION", "CROSS_REPOSITORY_ACCESS"]
}