bingshuo/hololake-system-architecture
Watch
1
0
Fork
You've already forked hololake-system-architecture
 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity

feat(hololake): bind direct-language V1 baseline

Browse source
This commit is contained in:
冰朔 2026-09-03 21:14:45 +08:00
commit 3df6b1d3ca
14 changed files with 809 additions and 23 deletions
Download patch file Download diff file Expand all files Collapse all files

26
product-source/hololake-clean-desktop/scripts/audit-clean-v1.py
View file

@ -37,6 +37,9 @@ for required_file in (
"src-tauri/src/realtime_bridge.rs",
"connectors/hololake-glp-client.py",
"contracts/public-runtime-v1.json",
"contracts/clean-v1-execution-baseline.json",
"contracts/enterprise-responsibility-entrance-v1.json",
"language/HOLOLAKE-CLEAN-V1-DIRECT-LANGUAGE-EXECUTION-BASELINE.tcs",
):
if not (ROOT / required_file).exists():
errors.append(f"public runtime file missing: {required_file}")
@ -45,6 +48,24 @@ if runtime_contract["transport"]["bind"] != "127.0.0.1":
errors.append("realtime bridge is not loopback-only")
if runtime_contract["mutation_gate"] != "PENDING_HUMAN_APPROVAL_TO_EXPLICIT_UI_APPROVAL_TO_EXECUTION":
errors.append("agent human approval gate missing")
baseline = json.loads((ROOT / "contracts/clean-v1-execution-baseline.json").read_text())
if baseline.get("anchor_manifest_sha256") != "7e130de78f91a32726e22e4be7d92acf4da966c8968ec359062aa8186c4243c2":
errors.append("current direct-language anchor manifest drift")
if baseline.get("public_raw_language_embedded") is not False:
errors.append("raw private direct language embedded in public baseline")
enterprise = json.loads((ROOT / "contracts/enterprise-responsibility-entrance-v1.json").read_text())
if enterprise.get("enterprise_server_embedded") is not False:
errors.append("enterprise server embedded in HoloLake")
if enterprise.get("device_proof", {}).get("fingerprint_is_sole_credential") is not False:
errors.append("machine fingerprint incorrectly used as sole credential")
if enterprise.get("session", {}).get("scope") != "ONE_DOMAIN_ONE_REPOSITORY":
errors.append("enterprise session is not responsibility scoped")
time_source = (ROOT / "src/time.ts").read_text()
app_source = (ROOT / "src/App.tsx").read_text()
if "legacyUnixSeconds" not in time_source or "时间待校验" not in time_source:
errors.append("legacy timestamp compatibility missing")
if "new Date(e.occurredAt)" in app_source:
errors.append("unvalidated timeline timestamp rendering remains")
tauri = json.loads((ROOT / "src-tauri/tauri.conf.json").read_text())
endpoints = tauri["plugins"]["updater"]["endpoints"]
@ -61,6 +82,11 @@ if clean.get("enterprise_four_domains_embedded") is not False:
errors.append("enterprise domains embedded in personal product")
if clean.get("fifth_domain_private_content_embedded") is not False:
errors.append("Fifth Domain private content embedded in public product")
assessment = architecture.get("current_product_assessment", {})
if assessment.get("desktop_artifact_version") != "1.1.0":
errors.append("current product assessment version drift")
if assessment.get("canonical_public_source_repository") != "REPO-014":
errors.append("canonical public source repository unresolved")
if errors:
print(json.dumps({"result": "FAIL_0", "errors": errors}, ensure_ascii=False, indent=2))