bingshuo/hololake-system-architecture
Watch
1
0
Fork
You've already forked hololake-system-architecture
 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity

feat(tcs): install and activate v3 native modules

Browse source
This commit is contained in:
冰朔 2026-08-24 12:28:00 +08:00
commit 6199e5b6bf
155 changed files with 16114 additions and 54 deletions
Download patch file Download diff file Expand all files Collapse all files

12
language/protocols/TCS-CAPABILITY-REGISTRY-LPM-DESKTOP-PAYLOAD-0003.tcs Normal file
View file

@ -0,0 +1,12 @@
TCS 0.1;
PROTOCOL TCS-CAPABILITY-REGISTRY-LPM-DESKTOP-PAYLOAD-0003 {
header { schema = "tcs.protocol/v1"; name_zh = "LPM与虚拟桌面能力注册表第三版签名载荷"; name_en = "LPM and Virtual Desktop Capability Registry V3 Signing Payload"; version = "0.3.0"; language = "TCS/0.1"; profile = "HLDP-NP/1"; lifecycle = "SIGNING_PAYLOAD"; canonical_uri = "language/protocols/TCS-CAPABILITY-REGISTRY-LPM-DESKTOP-PAYLOAD-0003.tcs"; compatibility = ["TCS-COMPILER-STAGE5-VERIFIED-MODULE-INSTALL-0001", "GIR/1"]; }
registry { registry_id = "TCS-CAPREG-LPM-DESKTOP-SIGNED-0003"; version = "0.3.0"; channel = "ICE-CH-ZC001"; development_line = "HOLOLAKE-LPM-TCS-NATIVE-20260823"; }
runtime { host_module = "TCS-MOD-GENERIC-GIR-MACHINE-HOST-MACOS-0001"; host_binary_sha256 = "0db064eb63d003f7a559c313caea2a4db5a62015667b221ae9b04ea6fb6e8389"; apple_codesign = "PASS_TEAM_825A9L3G7Q"; operations = ["TCS.EXECUTE_ACTION_GRAPH", "CORE.APPLY_EXACT_STATE_TRANSITION", "CORE.INSTALL_VERIFIED_MODULE"]; product_semantic_authority = false; }
mother_brain_module { module_id = "TCS-MOD-MOTHER-PERSONA-NEURON-RUNTIME-0003"; source_sha256 = "34f0a8a874add4348d64b3d20a483fc3346039f86fffbce755c8c8089d9df97a"; gir_sha256 = "16c1dac3861efc29cde1a62ea570bcb30676f2975e45a8e14bddaae3e1304fce"; lock_sha256 = "a73a2d1d857ef8dfca61acd10fc5dad90c18b66eda24211e622e130447c8c7c8"; manifest_sha256 = "ea9d20816a235eeebfa980882ca8ee5e8a7df7754cb1e05600350c94138534b9"; provider_source_sha256 = "be66bbc7190b555deb237962bcbc8c9492ad54f9c3c564f8830e18fd5c585ca6"; provider_gir_sha256 = "164aecb32ad936fbef094c180f181fbf59007aecb0c73ba8511a701e2bf3b95d"; product_operation = "LPM.APPLY_NEURON_EVENT"; machine_operation = "CORE.APPLY_EXACT_STATE_TRANSITION"; lifecycle = "VERIFIED_PROVIDER_EXECUTION_PASS_NOT_INSTALLED"; authority_ceiling = "NON_AUTHORIZING_COGNITIVE_STATE_ONLY"; }
desktop_module { module_id = "TCS-MOD-HOLOLAKE-DESKTOP-BRIDGE-0003"; source_sha256 = "0943e36aeb11dd7dd23afb2cdb526dac5659ff14208278a51d785c9d7fd53126"; gir_sha256 = "2b9e5325cde0710e350e0da2a8196d47958393225dd16fe9981d0ca20981b94b"; lock_sha256 = "f5bb00de174595f0778d7a358e7ab2405ca558a8471559f46b3bccfd253d066b"; manifest_sha256 = "76095be9e9f21c4c6bac5cae785d07b720973fcbd38073bd6834c7c73fe2e126"; provider_source_sha256 = "5b69bdec48864bb3aecae9641510751bb40cacb33a8dd202c704c4c9476f8de0"; provider_gir_sha256 = "fde42d5e33e486be5e6f24956415010fa04c28c544200ea4dcd54138eb58e577"; product_behavior = "VIRTUAL_SHARED_DESKTOP_OBJECT_OPEN"; machine_operation = "CORE.APPLY_EXACT_STATE_TRANSITION"; lifecycle = "VERIFIED_PROVIDER_EXECUTION_PASS_NOT_INSTALLED"; authority_ceiling = "ONE_TCS_VIRTUAL_DEDICATED_TEST_OBJECT"; }
evidence { lpm_target_sha256 = "1f4b90da7e6fc560ada5858ba3238e34ef8f6b26c52b75aa5b6f203892e4d067"; lpm_outer_receipt_sha256 = "98fb0574165cf90db5f9aa29f0c7e701340a97821dffd70c754c573d5e913190"; desktop_target_sha256 = "9ac0849412509b876a4b194a22ab91246c96639526df823a904119d955ef1e08"; desktop_outer_receipt_sha256 = "acdbf02a09a06a25cb0944742a2985ab85f8f32d28f704462c2d45592132face"; host_semantic_authority = false; real_macos_action = false; }
admission { provider_execution_exists = true; package_hashes_match = true; install_primitive_exists = true; install_after_valid_signature = true; install_scope = "ACCOUNT_SCOPED_DEVELOPMENT_LINE_ONLY"; mount_after_install_readback = true; activation_after_mount_and_replay = true; }
boundary { signature_does_not_install = true; install_does_not_mount = true; mount_does_not_activate = true; development_signer_is_not_global_production_trust = true; no_real_macos_desktop_action = true; }
}

10
language/protocols/TCS-CAPABILITY-REGISTRY-LPM-DESKTOP-SIGNED-0003.tcs Normal file
View file

@ -0,0 +1,10 @@
TCS 0.1;
PROTOCOL TCS-CAPABILITY-REGISTRY-LPM-DESKTOP-SIGNED-0003 {
header { schema = "tcs.protocol/v1"; name_zh = "LPM与虚拟桌面能力注册表第三版签名封装"; name_en = "LPM and Virtual Desktop Capability Registry V3 Signed Envelope"; version = "0.3.0"; language = "TCS/0.1"; profile = "HLDP-NP/1"; lifecycle = "SIGNED_VERIFIED_NOT_INSTALLED"; canonical_uri = "language/protocols/TCS-CAPABILITY-REGISTRY-LPM-DESKTOP-SIGNED-0003.tcs"; compatibility = ["TCS-COMPILER-STAGE5-VERIFIED-MODULE-INSTALL-0001", "GIR/1"]; }
payload { registry_id = "TCS-CAPREG-LPM-DESKTOP-SIGNED-0003"; path = "language/protocols/TCS-CAPABILITY-REGISTRY-LPM-DESKTOP-PAYLOAD-0003.tcs"; sha256 = "62e80b074e1982e7fe16fcf39400fb586efb73410d4c7ff070c2f1625252c56b"; gir_sha256 = "dadd14cacd30db1fe77e4749c78e8f59da9b1f6b50c4f1f7415996e50ead0b28"; }
signature { scheme = "Ed25519"; signer_id = "TCS-SIGNER-BINGSHUO-ZC001-DEV-0001"; public_key_raw_base64 = "pYL8D4tV+yGlmX6w7qYxSfY3yA996A3M2KcAsGSR7BU="; public_key_sha256 = "fd3da2d2b23c05c08dcdf7a37c15588d4b6407ec309152598eae279316ea49d8"; message_path = "build/TCS-CAPREG-LPM-DESKTOP-SIGNED-0003.signature-message.txt"; message_sha256 = "b9db03e121e932d19b605816dfce53b41be5ed8837977c30c76b7ce3ad5259f2"; signature_base64 = "e14hW8PjI3Uu+hLT9CEGvPPxy0wyQYlYapNJNF7ZUUL/Hip/QUqae/WDULSJqiewYJpY1V6jQBqprKoKMa4zBg=="; issued_at = "2026-08-24T04:20:00Z"; expiry_policy = "NO_AUTOMATIC_EXPIRY"; revocation_epoch = 3; verification = "PASS_WITH_PUBLIC_KEY_ONLY"; }
scope { channel = "ICE-CH-ZC001"; development_line = "HOLOLAKE-LPM-TCS-NATIVE-20260823"; account_scoped = true; production = false; remote_deploy = false; global_repo012_registry_replaced = false; }
admission { host_hash_match = true; installer_primitive_exists = true; provider_hashes_match = true; module_v3_hashes_match = true; install_admitted = true; mount_requires_separate_install_readback = true; activation_requires_separate_mount_and_replay = true; current_state = "SIGNED_VERIFIED_NOT_INSTALLED"; }
boundary { tcs_is_primary_language = true; fourth_generation_is_machine_runtime_only = true; signature_is_not_installation = true; installation_is_not_mount = true; mount_is_not_activation = true; no_real_macos_desktop_action = true; }
}

12
language/protocols/TCS-VERIFIED-MODULE-INSTALL-PRIMITIVE-0001.tcs Normal file
View file

@ -0,0 +1,12 @@
TCS 0.1;
PROTOCOL TCS-VERIFIED-MODULE-INSTALL-PRIMITIVE-0001 {
header { schema = "tcs.protocol/v1"; name_zh = "TCS已验签模块精确安装机械原语"; name_en = "TCS Signed Verified Module Exact Install Mechanical Primitive"; version = "0.1.0"; language = "TCS/0.1"; profile = "HLDP-NP/1"; lifecycle = "CANDIDATE"; canonical_uri = "language/protocols/TCS-VERIFIED-MODULE-INSTALL-PRIMITIVE-0001.tcs"; }
operation { id = "TCS-OP-CORE-INSTALL-0001"; name = "CORE.INSTALL_VERIFIED_MODULE"; input = "SIGNED_REGISTRY_PROOF_PLUS_EXACT_PACKAGE_FILE_SET"; output = "ACCOUNT_SCOPED_INSTALLED_BYTES_AND_READBACK_RECEIPT"; semantic_owner = "CALLING_TCS_INSTALL_PROGRAM"; host_role = "MECHANICAL_SIGNATURE_HASH_COPY_AND_READBACK_ONLY"; }
trust { signature_scheme = "Ed25519"; signer_id = "TCS-SIGNER-BINGSHUO-ZC001-DEV-0001"; signer_public_key_sha256 = "fd3da2d2b23c05c08dcdf7a37c15588d4b6407ec309152598eae279316ea49d8"; scope = "ICE-CH-ZC001_DEVELOPMENT_LINE_ONLY"; global_production_trust = false; }
inputs { signed_registry = ["PAYLOAD_PATH", "PAYLOAD_SHA256", "MESSAGE_PATH", "MESSAGE_SHA256", "SIGNATURE_BASE64", "PUBLIC_KEY_RAW_BASE64"]; package = ["MODULE_ID", "SOURCE_ROOT", "DESTINATION_ROOT", "FILES_WITH_SHA256"]; expected_destination = "ABSENT"; }
machine_rules { verify_message_hash = true; verify_payload_hash = true; verify_message_binds_payload_hash = true; verify_ed25519_signature = true; verify_signer_public_fingerprint = true; verify_each_source_file_hash = true; reject_symlink_escape = true; destination_inside_exact_runtime_root = true; copy_to_temporary_directory = true; readback_each_installed_hash = true; atomic_directory_rename = true; }
forbidden_host_semantics { interpret_module_meaning = false; interpret_lpm_or_desktop = false; infer_capability = false; infer_authority = false; select_files = false; change_bytes = false; mount_or_activate = false; }
lifecycle { install_is_mount = false; install_is_activation = false; install_receipt_required = true; rollback = "REMOVE_ONLY_TEMPORARY_OR_EXACT_NEW_INSTALL_DESTINATION"; }
errors { signature = "TCS-E4001"; hash = "TCS-E3001"; path = "TCS-E4002"; prior_destination = "TCS-E6001"; write_readback = "TCS-E8001"; }
}