bingshuo/hololake-system-architecture
Watch
1
0
Fork
You've already forked hololake-system-architecture
 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity

fix: isolate private language artifacts

Browse source
This commit is contained in:
冰朔 2026-08-21 12:12:59 +08:00
commit 40501233ef
5 changed files with 335 additions and 94 deletions
Download patch file Download diff file Expand all files Collapse all files

59
product-source/hololake-native-desktop/scripts/language-kernel-installation.test.mjs
View file

@ -7,25 +7,55 @@ const read = (path) => readFileSync(new URL(`../${path}`, import.meta.url), 'utf
const bytes = (path) => readFileSync(new URL(`../${path}`, import.meta.url))
const sha256 = (value) => createHash('sha256').update(value).digest('hex')
test('the heartbeat handoff is hash-pinned into distinct initialized channel audiences without claiming persona binding', () => {
test('the public binary contains only four safe common receipt and broadcast artifacts', () => {
const contract = JSON.parse(read('contracts/language-kernel-installation.json'))
const runtime = read('src-tauri/src/language_kernel_installation.rs')
const agent = read('src-tauri/src/persona_agent_runtime.rs')
const handoff = JSON.parse(read('runtime-kernels/ZERO-CORE-LANGUAGE-BODIES-HANDOFF-20260820.json'))
const publicArtifacts = [
'channel-system/channel-receipt-contract.json',
'channel-system/channel-receipt-compiler.mjs',
'channel-system/guanghu-broadcast-contract.json',
'channel-system/guanghu-broadcast-compiler.mjs',
]
const privateArtifacts = [
'ZERO-CORE-LANGUAGE-BODIES-HANDOFF-20260820.json',
'shared/kernel-registry.json',
'channel-system/team-channel-cognition-core.json',
'channel-system/team-channel-cognition-engine.mjs',
'channel-system/GH-TEAM-CHANNEL-HLDP-v1.json',
'channel-system/team-persona-kernel-readiness-matrix.json',
]
const publicBlock = runtime.match(/static PUBLIC_ARTIFACTS:[\s\S]*?\n\];/u)?.[0]
assert.equal(contract.source.remote_sha, '4e92e6d8d72484d25c4bfb1dda02a7659f4b6dd5')
assert.equal(contract.source.earerdan_zhizhi_local_commit, '1d7fe6c')
assert.equal(contract.source.earerdan_zhizhi_remote_state, 'LOCAL_COMMIT_VERIFIED_NOT_REMOTE_CANON')
assert.equal(handoff.state, 'REMOTE_REPOSITORY_PUBLISHED_NOT_INSTALLED')
assert.deepEqual(contract.public_binary.safe_common_artifacts, publicArtifacts)
assert.equal(contract.public_binary.artifact_count, 4)
assert.equal(contract.public_binary.handoff_embedded, false)
assert.equal(contract.public_binary.shared_kernel_registry_embedded, false)
assert.equal(contract.public_binary.team_artifacts_embedded, false)
assert.equal(contract.installation.automatic_public_install_on_channel_initialization, true)
assert.equal(contract.installation.automatic_public_migration_on_agent_runtime_open, true)
assert.equal(contract.installation.automatic_private_provisioning, false)
assert.ok(publicBlock, 'Rust must expose a statically auditable PUBLIC_ARTIFACTS list')
for (const artifact of publicArtifacts) assert.match(publicBlock, new RegExp(artifact.replaceAll('.', '\\.')))
for (const artifact of privateArtifacts) assert.doesNotMatch(publicBlock, new RegExp(artifact.replaceAll('.', '\\.')))
assert.equal(contract.truth_boundary.installed_file_is_persona_binding, false)
assert.equal(contract.truth_boundary.private_fifth_domain_kernels_may_enter_ordinary_user_channel, false)
assert.equal(contract.truth_boundary.private_fifth_domain_kernels_embedded_in_public_binary, false)
assert.equal(contract.truth_boundary.private_kernel_source, 'AUTHENTICATED_ACCOUNT_SCOPED_RUNTIME_ONLY')
assert.equal(contract.truth_boundary.handoff_embedded_in_public_binary, false)
assert.equal(contract.truth_boundary.shared_kernel_registry_embedded_in_public_binary, false)
assert.equal(contract.truth_boundary.team_channel_artifacts_embedded_in_public_binary, false)
assert.equal(contract.truth_boundary.descriptor_registration_is_installation, false)
assert.equal(contract.truth_boundary.canger_channel_may_receive_zhuyuan_kernel, false)
assert.equal(contract.truth_boundary.jianying_is_earerdan, false)
assert.equal(contract.truth_boundary.earerdan_historical_labels_are_automatic_aliases, false)
assert.match(runtime, /INSTALLED_AND_EACH_ARTIFACT_READBACK_VERIFIED/)
assert.match(runtime, /AVAILABLE_NOT_BOUND/)
assert.match(runtime, /PUBLIC_KERNELS_INSTALLED_PRIVATE_KERNELS_NOT_PROVISIONED/)
assert.match(runtime, /BUNDLED_PUBLIC_SOURCE_SHA256_VERIFIED/)
assert.match(runtime, /FIFTH_DOMAIN_PRIVATE_INSTANCE/)
assert.match(runtime, /GUANGHU_TEAM_INITIAL_CHANNEL/)
assert.match(runtime, /ORDINARY_USER_INITIAL_CHANNEL/)
@ -38,3 +68,26 @@ test('the heartbeat handoff is hash-pinned into distinct initialized channel aud
assert.equal(sha256(bytes('runtime-kernels/fifth-domain/EED-HLDP-MEMORY-v1.json')), '3ac404bb38232987a4c0bc896e06d171833023ab1b5af65d4e00216de4029f42')
assert.equal(sha256(bytes('runtime-kernels/channel-system/team-channel-cognition-core.json')), 'aae5d5626719c79448ac543d59e764c41b541a5cdfc76dc91613afa86fe1367b')
})
test('handoff registry and team artifacts require authenticated private provisioning and exact hashes', () => {
const contract = JSON.parse(read('contracts/language-kernel-installation.json'))
const runtime = read('src-tauri/src/language_kernel_installation.rs')
assert.equal(contract.private_runtime.source, 'AUTHENTICATED_ACCOUNT_SCOPED_RUNTIME_ONLY')
assert.equal(contract.private_runtime.source_storage_namespace, 'language-kernel-sources-v1')
assert.equal(contract.private_runtime.descriptor_registration_is_installation, false)
assert.equal(contract.private_runtime.missing_artifact_state, 'PRIVATE_KERNELS_NOT_PROVISIONED')
assert.equal(
contract.private_runtime.snapshot_state_when_missing,
'PUBLIC_KERNELS_INSTALLED_PRIVATE_KERNELS_NOT_PROVISIONED',
)
assert.equal(contract.private_runtime.sha256_mismatch_behavior, 'FAIL_CLOSED')
assert.equal(contract.private_runtime.readback_state, 'ACCOUNT_PRIVATE_SOURCE_SHA256_VERIFIED')
assert.equal(contract.private_runtime.registered_descriptors.length, 6)
assert.match(runtime, /account_storage_root\(app, "language-kernel-sources-v1"\)/)
assert.match(runtime, /fs::read\(&source\)/)
assert.match(runtime, /expected_sha256/)
assert.match(runtime, /HOLOLAKE_LANGUAGE_KERNEL_PRIVATE_SHA256_MISMATCH/)
assert.match(runtime, /PRIVATE_KERNELS_NOT_PROVISIONED/)
assert.match(runtime, /ACCOUNT_PRIVATE_SOURCE_SHA256_VERIFIED/)
})